INFO
Source
CloudSploit
ID
privilege-analysis

Privilege Analysis

Ensures that no virtual machines in your Azure environment have excessive permissions.

Virtual machines that use managed identities with excessive Azure AD permissions may pose security risks. It is a best practice to assign only the necessary permissions to the managed identities attached to virtual machines.

Review and restrict the Azure AD roles associated with managed identities used by virtual machines to follow the principle of least privilege.