---
title: Azure service principal has administrator-equivalent RBAC rights
description: Datadog, the leading service for cloud-scale monitoring.
breadcrumbs: >-
  Docs > Datadog Security > OOTB Rules > Azure service principal has
  administrator-equivalent RBAC rights
---

> For the complete documentation index, see [llms.txt](https://docs.datadoghq.com/llms.txt).

# Azure service principal has administrator-equivalent RBAC rights

## Description{% #description %}

An Azure service principal has administrator-equivalent Azure RBAC rights at the tenant root, a management group, or a subscription. These permissions can allow the principal to create or delete resources, change security configurations, or grant additional access within that scope.

## Remediation{% #remediation %}

Review the service principal's role assignments and remove assignments that grant unnecessary administrator-equivalent permissions. Replace them with the least-privileged roles required for the application's intended function. For guidance, refer to [Remove Azure role assignments](https://learn.microsoft.com/en-us/azure/role-based-access-control/role-assignments-remove).