...
If the vendor will be doing work that requires privileged access, they will be required to use a vendor administrative account using the established Privileged Access Standard. The account may only be used for the purpose it was created for and will be stored in the OU Admin and can only be acted on by Domain Admins.
...