| Source | Azure Portal | ||||||||||
| Display name | All Database Admin on Azure Data Explorer should be disabled | ||||||||||
| Id | 8945ba5e-918e-4a57-8117-fe615d12e3ba | ||||||||||
| Version | 1.0.0 Details on versioning |
||||||||||
| Category | Azure Data Explorer Microsoft Learn |
||||||||||
| Description | Disable all database admin role to restrict granting highly privileged/administrative user role. | ||||||||||
| Mode | All | ||||||||||
| Type | BuiltIn | ||||||||||
| Preview | False | ||||||||||
| Deprecated | False | ||||||||||
| Effect | Default Audit Allowed Audit, Deny, Disabled |
||||||||||
| RBAC role(s) | none | ||||||||||
| Rule aliases | IF (1)
|
||||||||||
| Rule resource types | IF (1) Microsoft.Kusto/Clusters/principalAssignments |
||||||||||
| Compliance | Not a Compliance control | ||||||||||
| Initiatives usage | none | ||||||||||
| History |
|
||||||||||
| JSON compare | n/a | ||||||||||
| JSON |
|