Policy: Azure > CIS v4.0 > 06 - Identity Services > 06.03 - Periodic Identity Reviews > 06.03.04 - Ensure that all 'privileged' role assignments are periodically reviewed > Attestation

By setting this policy, you attest that you have manually verified that it complies with the relevant section of the CIS Benchmark.

To verify privileged role assignments are reviewed: 1. From Azure Home select the Portal Menu 2. Select Microsoft Entra ID 3. Under Manage, select Roles and administrators 4. Review assignments for privileged roles including: - Global Administrator - Privileged Role Administrator - Security Administrator - User Access Administrator 5. Verify each assignment is necessary and appropriate 6. Document the review and remove any unnecessary assignments

Once verified, enter the date that this attestation expires. Note that the date can not be further in the future than is specified in report level Maximum Attestation Duration policy. Set to a blank value to clear the attestation.