turbot/steampipe-mod-googleworkspace-compliance

Query: directory_user_admin_max_count

Usage

powerpipe query googleworkspace_compliance.query.directory_user_admin_max_count

Steampipe Tables

SQL

with super_admins as (
select
count(*) as count
from
googledirectory_user
where
is_admin = true
)
select
'organization' as resource,
case
when count <= 4 then 'ok'
else 'alarm'
end as status,
'Found ' || count || ' super admin account(s). Maximum recommended is 4.' as reason
from
super_admins;

Controls

The query is being used by the following controls: