Skip to main content

💼 1.20 Ensure That No Custom Subscription Owner Roles Are Created - Level 2 (Automated)

  • Contextual name: 💼 1.20 Ensure That No Custom Subscription Owner Roles Are Created - Level 2 (Automated)
  • ID: /frameworks/cis-azure-v1.4.0/01/20
  • Located in: 💼 1 Identity and Access Management

Description​

Subscription ownership should not include permission to create custom owner roles. The principle of least privilege should be followed and only necessary privileges should be assigned instead of allowing full administrative access.

Similar​

  • Internal
    • ID: dec-c-7c888977

Sub Sections​

SectionSub SectionsInternal RulesPoliciesFlags