Skip to main content

💼 6.3.3 Ensure that use of the 'User Access Administrator' role is restricted (Automated)

  • ID: /frameworks/cis-azure-v4.0.0/06/03/03

Description​

The User Access Administrator role grants the ability to view all resources and manage access assignments at any subscription or management group level within the tenant. Due to its high privilege level, this role assignment should be removed immediately after completing the necessary changes at the root scope to minimize security risks.

Similar​

Similar Sections (Give Policies To)​

SectionSub SectionsInternal RulesPoliciesFlagsCompliance
💼 CIS Azure v5.0.0 → 💼 5.3.3 Ensure that use of the 'User Access Administrator' role is restricted (Automated)1no data

Sub Sections​

SectionSub SectionsInternal RulesPoliciesFlagsCompliance