I have been running into situations ... in with a global administrator account for that partcular tenant. Is there a way to access the AzureAD portal from the Microsoft 365 Admin Center?... More on community.spiceworks.com

Office 365/AzureAD and all other Azure resources are separate systems. The confusion lies in that Azure uses your AAD as the directory for authenticating users logging in to manage it. You need to assign the appropriate Role Based Access Control permissions in the Azure portal if you want users to be able to access resources in Azure. Microsoft has some really good RBAC Documentation talking about the whole setup if you want to learn more. Giving users Global Admin only gives them rights over Office 365/AAD, not over the whole Azure portal. More on reddit.com

As far as I know, this can't be done. I'm going to oversimplify things in the following explanation: When a user logs into Azure, they will get two tokens: Access Token: an ID that says who they are and contains metadata about what they can do and what they can access, this by default expires every 60 minutes. Refresh Token: an ID used to re-generate access tokens before they expire. You can revoke the refresh token on demand using a simple PowerShell command, this will disallow the user from getting any new access tokens, however the currently used access token in the browser session is still active and valid for 60 minutes (remember, this is just the default value), so until the user closes the session or do something that invalidates the access token they currently have, they will still be able to access resources. As far as I know, Azure does not have any tool to forcefully revoke the access token, you will have to wait for that to expire. You can, change the life time of any new generated access tokens, the 1 hour is the general recommendation. For more info: PowerShell command to revoke the refresh token: For a remote user: https://docs.microsoft.com/en-us/powershell/module/azuread/revoke-azureaduserallrefreshtoken?view=azureadps-2.0 For currently logged in user where the command will run (generally used for testing purposes) https://docs.microsoft.com/en-us/powershell/module/azuread/revoke-azureadsignedinuserallrefreshtoken?view=azureadps-2.0 Access Token / Refresh Token reference: https://docs.microsoft.com/en-us/azure/active-directory/develop/access-tokens https://docs.microsoft.com/en-us/azure/active-directory/develop/active-directory-configurable-token-lifetimes#token-types Change token life time in Azure AD: Mostly deprecated but still available for access tokens only: https://docs.microsoft.com/en-us/azure/active-directory/develop/active-directory-configurable-token-lifetimes#configurable-policy-property-details The new method using Conditional Access Policies: https://docs.microsoft.com/en-us/azure/active-directory/conditional-access/howto-conditional-access-session-lifetime More on reddit.com

I believe that exchange permissions is different to o365 admin portal permissions. Sounds like a permission change to me More on reddit.com