Any way to limit O365 Global Admin account other than username / password?

Any way to limit O365 Global Admin account other than username / password?

Currently the only way to provision O365 accounts / mailbox through ADMP is via Global admin username / password in the app - UI.

Is there any way to lock down the permissions or use Conditional Access to limit access from a single IP or have MFA on the account or use API?

Please and thank you.

                New to ADSelfService Plus?