Subscriptions should have between two and three owners
이 페이지는 아직 한국어로 제공되지 않습니다. 번역 작업 중입니다.
현재 번역 프로젝트에 대한 질문이나 피드백이 있으신 경우
언제든지 연락주시기 바랍니다.Description
The Owner role grants full control over all subscription resources, including the ability to assign roles to other users. Maintain two to three Owner role assignments per subscription to balance operational availability and least-privilege access. At least two Owners ensure continuity, while limiting assignments to three reduces the impact of a compromised account.
This rule counts distinct principals assigned the Owner role at the subscription scope, including users, groups, service principals, and managed identities.
Review Owner role assignments in the Azure portal under the subscription’s Access control (IAM) blade. Remove excess owners or add a second owner as needed to reach the 2–3 range. For details on the Owner built-in role, see Azure built-in roles — Owner.