Control: 1.20 Ensure that 'Owners can manage group membership requests in the Access Panel' is set to 'No'
Description
Restrict security group management to administrators only.
Restricting security group management to administrators only prohibits users from making changes to security groups. This ensures that security groups are appropriately managed and their management is not delegated to non-administrators.
Remediation
From Azure Portal
- From Azure Home select the Portal Menu.
- Select
Azure Active Directory
. - Then
Groups
. - Select
General
insettings
. - Set
Owners can manage group membership requests in the Access Panel
toNo
.
Default Value
By default, Owners can manage group membership requests in the Access Panel
is set to No
.
Usage
Run the control in your terminal:
powerpipe control run azure_compliance.control.cis_v200_1_20
Snapshot and share results via Turbot Pipes:
powerpipe loginpowerpipe control run azure_compliance.control.cis_v200_1_20 --share
SQL
This control uses a named query:
ad_manual_control