Skip to main content

💼 5.3.3 Ensure That Use of the 'User Access Administrator' Role is Restricted (Automated)

  • ID: /frameworks/cis-azure-v6.0.0/05/03/03

Description

The User Access Administrator role grants the ability to view all resources and manage access assignments at any subscription or management group level within the tenant. Due to its high privilege level, this role assignment should be removed immediately after completing the necessary changes at the root scope to minimize security risks.

Similar

  • Sections
    • /frameworks/cis-azure-v5.0.0/05/03/03

Similar Sections (Take Policies From)

SectionSub SectionsInternal RulesPoliciesFlagsCompliance
💼 CIS Azure v5.0.0 → 💼 5.3.3 Ensure that use of the 'User Access Administrator' role is restricted (Automated)1no data

Similar Sections (Give Policies To)

SectionSub SectionsInternal RulesPoliciesFlagsCompliance
💼 CIS Azure v5.0.0 → 💼 5.3.3 Ensure that use of the 'User Access Administrator' role is restricted (Automated)1no data

Sub Sections

SectionSub SectionsInternal RulesPoliciesFlagsCompliance

Policies (1)

PolicyLogic CountFlagsCompliance
🛡️ Azure User Access Administrator Role has assignments🟢1🟢 x6no data