💼 5.9 Ensure creating management groups requires write permission on the root management group (Automated)
- ID:
/frameworks/cis-azure-v7.0.0/05/09
Stats
not available
Description
A tenant permits management group creation under one of two rules: any user or service principal in the tenant, or only principals granted management group write permission on the root management group. The Require write permissions for creating new management groups setting selects between them. Prerequisites: Grant management group write permission on the root management group to every user and pipeline identity that must continue to create management groups.
Similar
Sub Sections
| Section | Sub Sections | Internal Rules | Policies | Flags | Compliance |
|---|
Policies (1)
| Policy | Logic Count | Flags | Compliance |
|---|---|---|---|
| 🛡️ Azure Tenant management group creation does not require authorization🟢⚪ | 🟢 x2, ⚪ x1 | no data |