Currently Partner users that have access to CSP can log into the clients tenant using their own MS login. This is great for support and implementation but what if the client doesn't want the partner to be able to log into their system without them approving it first?

I opened a support case with MS with this very question and was told there currently wasn't any method to implement any type of notification or restriction to a partner user. The work around is to manually watch the Users page within BC to see if a partner user has logged into the company and then Disable their user.

Personally I do think this is a big security issue, especially for Publicly traded companies. I'd like to see this addressed by MS ASAP.