turbot/azure_compliance

Control: 1.12 Ensure that 'Guest user permissions are limited' is set to 'Yes'

Description

Limit guest user permissions.

Limiting guest access ensures that guest accounts do not have permission for certain directory tasks, such as enumerating users, groups or other directory resources, and cannot be assigned to administrative roles in your directory. If guest access in not limited, they have the same access to directory data as regular users.

Remediation

From Console

  1. Log in to Azure Active Directory
  2. Go to External Identities in side bar
  3. Go to External collaboration settings further from side bar
  4. Set Guest users permissions to limited as per organization policy.

See more details here

Usage

steampipe check azure_compliance.control.cis_v130_1_12

SQL

This control uses a named query:

ad_manual_control

Tags