Azure > Active Directory >

No Custom Owner Roles

MEDIUM

Source

CloudSploit

no-custom-owner-roles

management console

No Custom Owner Roles

Ensures that no custom owner roles exist.

Subscription owners should not include permissions to create custom owner roles. This follows the principle of least privilege.

Recommended Actions

Remove roles that allow permissions to create custom owner roles.

Links

https://learn.microsoft.com/en-us/azure/role-based-access-control/custom-roles

Aqua Container Security

Aqua Security is the largest pure-play cloud native security company, providing customers the freedom to innovate and run their businesses with minimal friction. The Aqua Cloud Native Security Platform provides prevention, detection, and response automation across the entire application lifecycle to secure the build, secure cloud infrastructure and secure running workloads wherever they are deployed.