Query: Blocked accounts with owner permissions on Azure resources should be removed

Description

Deprecated accounts with owner permissions should be removed from your subscription. Deprecated accounts are accounts that have been blocked from signing in.

Query

Tables used in this query:

• azure_role_assignment
• azure_role_definition
• azure_tenant
• azuread_user

Controls using this query:

• Blocked accounts with owner permissions on Azure resources should be removed

SQL