Infosec quotes - normal usage admin accounts

"Accounts with full privilege across an enterprise (such as a domain admin, global admin, or cloud admin account) should not normally be used." 

https://www.ncsc.gov.uk/guidance/preventing-lateral-movement