Query: Ensure that no Custom Subscription Administrator roles exist

Description

The principle of least privilege should be followed and only necessary privileges should be assigned instead of allowing full administrative access.

Query

Tables used in this query:

• azure_role_definition
• azure_subscription

Controls using this query:

• 1.20 Ensure that no custom subscription owner roles are created
• 1.21 Ensure that no custom subscription owner roles are created
• 1.22 Ensure That No Custom Subscription Administrator Roles Exist
• 1.23 Ensure That No Custom Subscription Administrator Roles Exist
• 1.23 Ensure That No Custom Subscription Owner Roles Are Created
• 2.23 Ensure That No Custom Subscription Administrator Roles Exist
• Ensure that no Custom Subscription Administrator roles exist

SQL