Control: 1.14 Minimize the number of users with admin privileges in the account

Description

Comply with the principle of granting least privilege by using Access Groups to manage admin privileges and by avoiding the use of broadly scoped access policies.

Remediation

From Console

1. Log in to IBM Cloud
2. From the Menu bar, click Manage > Access(IAM).
3. Click Users and select an User by clicking on the User name.
4. Click on the Access Policies tab.
5. View the access policies assigned to the User to verify if that User has Administrator Role assigned.
6. If there are many such users with Administrative privileges, select to remove the Administrative privilege or Remove that User from the list of users.