Remediation
From Azure Portal
- Go to
Subscriptions. - Click the name of a subscription.
- Click
Access Controls (IAM). - Click
Role assignments. - Click
Role : All. - Click the arrow next to
All. - Click
Owner. - Check the box next to members from whom the owner role should be removed.
- Click
Delete. - Click
Yes. - Repeat steps 1-10 for each subscription requiring remediation.
From Azure CLI
Run the following command to delete role assignments by role assignment id:
az role assignment delete --ids {{id1 id2}}