Query: Guest accounts with read permissions on Azure resources should be removed

Description

External accounts with read privileges should be removed from your subscription in order to prevent unmonitored access.

Query

Tables used in this query:

• azure_role_assignment
• azure_role_definition
• azure_tenant
• azuread_user

Controls using this query:

• Guest accounts with read permissions on Azure resources should be removed

SQL