Optimize Azure Role Entitlementshttps://docs.sysdig.com/en/docs/sysdig-secure/identity/roles/optimize-azure-roles/Recent content on Optimize Azure Role EntitlementsenThu, 30 Jul 2026 12:09:24 -0400 https://docs.sysdig.com/icons/sysdig-horizontal.pngOptimize Azure Role Entitlementshttps://docs.sysdig.com/en/docs/sysdig-secure/identity/roles/optimize-azure-roles/Sysdig logoOptimize Azure Role Entitlements - Manage Role Entitlements with Detail Drawershttps://docs.sysdig.com/en/docs/sysdig-secure/identity/roles/optimize-azure-roles/#manage-role-entitlements-with-detail-drawersTo reduce the entitlements for a particular role, click on the role name to open the detail drawer and subtabs.To reduce the entitlements for a particular role, click on the role name to open the detail drawer and subtabs.

The Roles page organizes everything around the Azure role.

  • Summary: Displays the critical permissions issues detected for this user, sorted by Permission Criticality and Unused Permission Criticality.
  • Remediation Strategies: Summarizes all the potential strategies to reduce the permissions for this user.
  • Connected IAM Resources: Displays a summary of this role’s total granted permissions, group associations, activity, and service principals. Displays the policies to which this role is connected, sorted by unused permissions.

If Sysdig has been profiling a user for less than 90 days, you will see the following message:

We recommend a 90 day period to pass before applying remediation optimizations to establish a good baseline for used permissions.

]]>Manage Role Entitlements with Detail DrawersOptimize Azure Role Entitlements - Understand Role Permissionshttps://docs.sysdig.com/en/docs/sysdig-secure/identity/roles/optimize-azure-roles/#understand-role-permissionsHover over the % Unused Permissions column to see the permissions granted to a role:Hover over the % Unused Permissions column to see the permissions granted to a role:

  • Total Permissions: The total number of permissions granted to a role
  • Unused Permissions: The total number of unused permissions from all the connected entities.
]]>Understand Role PermissionsOptimize Azure Role Entitlements - Remediation Strategieshttps://docs.sysdig.com/en/docs/sysdig-secure/identity/roles/optimize-azure-roles/#remediation-strategiesDetach Users from this Role.

  • Detach Users from this Role.

    All the Users that have not used any permissions from this connected role can be detached

  • Detach Service Accounts from this Role

    All the Service Accounts that have not used any permissions from this connected role can be detached

  • Detach Groups from this Role

    All the Groups that have not used any permissions from this connected role can be detached

    • ]]>    Remediation Strategies