APP-01MediumRecommended Secure

Assign Owners to All Applications

Workload Identity & Applications control for Microsoft 365 and Entra ID

Why This Control Matters

Unowned applications become orphaned and unmanaged. When security issues arise or credentials need rotation, there is no accountable party. Orphaned apps are a common persistence mechanism for attackers.

Expected State

When this control is compliant, your tenant should meet these criteria:

  • 1Every app registration has at least one owner assigned
  • 2Every enterprise application (service principal) has at least one owner
  • 3Owners are active employees (not stale accounts)

Enforcement

Default Mode
Advisory

Alerts on deviations but does not make changes

Auto-Remediation
Manual Only

Review and assign owners to applications

Ready to implement this control?

TrueConfig continuously monitors your Microsoft 365 tenant for compliance with this and 50+ other security controls.