💼 5.12 Ensure Role Assignment Management is Delegated with the 'Role Based Access Control Administrator' Role and Conditions (Automated)
- ID:
/frameworks/cis-azure-v7.0.0/05/12
Stats
not available
Description
Role assignment management is delegated through User Access Administrator, or through Role Based Access Control Administrator with or without a role assignment condition that limits the roles and principals the delegate can assign. Root-scope assignments are covered by 'Ensure That Use of the 'User Access Administrator' Role is Restricted'. Prerequisites: Identify the roles and principal types each delegate assigns, including automation pipelines, so the condition does not block required assignments.
Similar
Sub Sections
| Section | Sub Sections | Internal Rules | Policies | Flags | Compliance |
|---|
Policies (1)
| Policy | Logic Count | Flags | Compliance |
|---|---|---|---|
| 🛡️ Azure Role assignment delegation lacks conditional RBAC administration🟢⚪ | 🟢 x2, ⚪ x1 | no data |