One Token to rule them all – obtaining Global Admin in every Entra ID tenant