In general, you should prefer to restrict none privilege account access to your administrative portal URL’s. When your day to day user figures out one of the administration URL’s and wants to access them, out the box configuration will allow them to do so. This short article will list steps how to prevent users accessing to directory services information.

Let’s start listing admin known portal URL’s first then take a look how authenticated none privilege user would have access to such resources and why this would be not the best scenario for your business. First download this awesome script “ACCESS-O365-ADMIN-URLs-V1.ps1” from Tech-Net scripting library to help your administrators to access some of these URL’s more efficiently.

Some of the most used O365 Admin portal URL List.

Portal Name	Portal URL
Admin Portal	https://admin.microsoft.com/AdminPortal/Home#
Azure Active Directory Admin Center	http://aad.portal.azure.com
Azure Directory	https://manage.windowsazure.com/
One Drive Admin Portal	https://admin.onedrive.com/
Teams Admin Portal	https://admin.teams.microsoft.com
Lync Admin Portal (legacy)	https://admin0a.online.lync.com/LSCP
SharePoint Admin Portal	https://tenant-admin.sharepoint.com
TSA ECP Access	https://outlook.office.com/ecp
Quarantine Management	https://protection.office.com/?hash=/quarantine
Message Trace	https://protection.office.com/messagetrace