Azure_IAM_18 - Cloudlytics

Azure_IAM_18

Ensure that Users who can manage security groups is set to None

Description

Restrict security group management to administrators only.

Remediation

Perform the following in the Azure Console:

Go to Azure Active Directory
Go to Users and group
Go to Group settings
Set Users who can manage security groups to None

References:

https://docs.microsoft.com/en-us/azure/active-directory/active-directory-accessmanagement-self-service-group-management#making-a-group-available-for-end-user-self-service

Service

IAM

Severity

High

Compliance

Mapping