You nave 200 resource groups across 20 Azure subscriptions.
Your company's security policy states that the security administrator most verify all assignments of the Owner role for the subscriptions and resource groups once a month. All assignments that are not approved try the security administrator must be removed automatically. The security administrator must be prompted every month to perform the verification.
What should you use to implement the security policy?
Azure Active Directory (Azure AD) access reviews enable organizations to efficiently manage group memberships, access to enterprise applications, and role assignments. User's access can be reviewed on a regular basis to make sure only the right people have continued access.
https://docs.microsoft.com/en-us/azure/active-directory/governance/access-reviews-overview
Currently there are no comments in this discussion, be the first to comment!