GOV-07: Audit Privileged Role Assignments

GOV-07 is a security control that privilege creep happens gradually. without a baseline of who should have admin rights, you cannot detect unauthorized role assignments. regular auditing ensures only authorized users retain privileged access. It requires that all privileged role assignments are documented and a baseline of expected role holders exists, changes from baseline are detected and reviewed.

Privilege creep happens gradually. Without a baseline of who should have admin rights, you cannot detect unauthorized role assignments. Regular auditing ensures only authorized users retain privileged access.

GOV-07 requires manual implementation. Creates baseline snapshot of privileged role assignments for drift detection

This control can be implemented with any Microsoft 365 subscription, including free Azure AD.

GOV-07 is included in the TrueConfig Recommended Secure baseline (Level 1). This is the foundation level suitable for most organizations.