Azure_IAM_27
External accounts with write privileges should be removed from your subscription in order to prevent unmonitored access.
Ensure that External accounts with read permissions should be removed from your subscription