Query: Blocked accounts with read and write permissions on Azure resources should be removed

Description

Deprecated accounts should be removed from your subscriptions. Deprecated accounts are accounts that have been blocked from signing in.

Query

Tables used in this query:

• azure_role_assignment
• azure_role_definition
• azure_tenant
• azuread_user

Controls using this query:

• Blocked accounts with read and write permissions on Azure resources should be removed

SQL