VIEW RULE IN DATADOG

Description

A Microsoft Entra B2B guest user has administrator-equivalent Azure RBAC rights at the tenant root, a management group, or a subscription. Guest accounts are typically used for external collaboration and may authenticate with identities managed outside your tenant. Compromise or mismanagement of a guest account could allow an attacker to control resources and security settings within that scope.

Remediation

Review the guest user’s access and remove Azure role assignments that grant unnecessary administrator-equivalent permissions. Remove guest accounts that no longer require access, and use access reviews to regularly validate continued access. For guidance, refer to Remove Azure role assignments and Manage guest access with access reviews.