Azure_IAM_17 - Cloudlytics

Azure_IAM_17

Ensure that Users can create security groups is set to No

Description

Restrict security group creation to administrators only.

Remediation

Perform the following in the Azure Console:

Go to Azure Active Directory
Go to Users and group
Go to Group settings
Set Users can create security groups to No

References:

https://docs.microsoft.com/en-us/azure/active-directory/active-directory-accessmanagement-self-service-group-management#making-a-group-available-for-end-user-self-service

Service

IAM

Severity

High

Compliance

Mapping