Ensures that the User Access Administrator role is not assigned at the root scope.
Assigning the User Access Administrator role at the root scope allows viewing all resources and managing access assignments across every subscription and management group in the tenant. This elevated access is intended to be temporary and should be removed once the required changes are complete, to reduce the risk of privilege escalation and unauthorized access.
Remove User Access Administrator role assignments at the root scope that are no longer required.