Remediation

From Azure Portal

1. Go to Subscriptions.
2. Click the name of a subscription.
3. Click Access control (IAM).
4. Click Role assignments.
5. Click Job function roles.
6. Check the box next to any inappropriate assignments.
7. Click Delete.
8. Click Yes.
9. Repeat steps 1-8 for each subscription.