cis-azure-foundations-5.24
Ensure a custom role is assigned permissions for administering resource locks
1.21k repo starsObserved in 1 repos
DevOps & Security
Browse reusable Agent Skills, each with a clear purpose and practical guidance.
Ensure a custom role is assigned permissions for administering resource locks
Ensure 'Subscription leaving/entering Microsoft Entra tenant' is set to 'Permit no one'
Ensure there are between 2 and 3 subscription owners
Ensure passwordless authentication methods are considered
Ensure Azure admin accounts are not used for daily operations
Ensure guest users are reviewed on a regular basis
Ensure use of the 'User Access Administrator' role is restricted
Ensure 'Tenant Creator' role assignments are periodically reviewed
Ensure all non-privileged role assignments are periodically reviewed
Ensure 'Restrict non-admin users from creating tenants' is set to 'Yes'