IAM users should not have the built-in Contributor role
Ensure that IAM user does not have built in contributor role. This rule is non-compliant if IAM user have built in contributor role.
What this control checks
Fails if an IAM user has the built in contributor role.
Audit evidence
Evidence that deployed resources meet this control: PowerPipe control azure_compliance.control.iam_user_no_built_in_contributor_role.
Related controls
Tool mappings
Use these identifiers to cross-reference this control across tools, reports, and evidence.
- Compliance.tf Control:
iam_user_no_built_in_contributor_role - Powerpipe Control:
azure_compliance.control.iam_user_no_built_in_contributor_role
Last reviewed: 2026-10-13