Glossary: Monitoring Tools and the Identity Life Cycle
Tiered administration
Also written: tier 0, tiers
Separating admin accounts by how trusted the systems are. Global admins sign in only to tier 0 systems such as domain controllers, so their hashes and tickets are never left on ordinary machines.