Azure_IAM_28
External accounts with write privileges should be removed from your subscription in order to prevent unmonitored access.
Ensure that External accounts with write permissions should be removed from your subscription