Microsoft Access Control best practices

Knowledge Base Microsoft Azure Access Control

Best practice rules for Access Control

Cloud Conformity monitors Access Control following the following rules:

Remove Custom Owner Roles
Ensure there are no custom owner roles within your Microsoft Azure cloud account.