Query: Guest accounts with write permissions on Azure resources should be removed

Description

External accounts with write privileges should be removed from your subscription in order to prevent unmonitored access.

Query

Tables used in this query:

• azure_role_assignment
• azure_role_definition
• azure_tenant
• azuread_user

Controls using this query:

• Guest accounts with write permissions on Azure resources should be removed

SQL