💼 5.10 Ensure Emergency Access Accounts Can Regain Azure Resource Access (Manual)
- ID:
/frameworks/cis-azure-v7.0.0/05/10
Stats
not available
Description
Microsoft Entra ID roles grant no Azure RBAC, so a tenant can lose all ability to manage its subscriptions while Global Administrators remain. A Global Administrator restores access by setting Access management for Azure resources to Yes, which grants root-scope access. Maintain emergency access accounts (aka "break-glass accounts") and a tested recovery procedure.
Similar
Sub Sections
| Section | Sub Sections | Internal Rules | Policies | Flags | Compliance |
|---|
Policies (1)
| Policy | Logic Count | Flags | Compliance |
|---|---|---|---|
| 🛡️ Azure Emergency Access Account resource recovery is not established🟢⚪ | 🟢 x2, ⚪ x1 | no data |