# Organization Owner should not be an individual

Azure DevOps organization owner should not be assigned to a regular user.

Source: https://maester.dev/docs/tests/AZDO.1013

<!-- This file is generated by website/scripts/generate-test-docs.mjs. Do not edit manually. -->

<div class="test-byline"><div class="test-byline-avatars"><a class="test-byline-avatar test-byline-avatar--author" href="/contributors/sebastianclaesson" title="Sebastian Claesson · Original author"><img src="https://github.com/SebastianClaesson.png" alt="Sebastian Claesson" width="28" height="28" loading="lazy" decoding="async" /></a></div><div class="test-byline-meta"><span class="test-byline-text">Contributed by <a href="/contributors/sebastianclaesson">Sebastian Claesson</a></span><a class="test-byline-link" href="/contributors">All contributors →</a></div></div>

<p class="test-part">Part of <a href="/docs/tests/maester">Maester</a> · Azure DevOps · Users and access · <a href="/docs/tests">All checks</a></p>

```powershell title="Run this check"
Invoke-Maester -TestId AZDO.1013
```

## Overview

Azure DevOps organization owner **should not** be assigned to a regular user.

Rationale: Owner has full administrative control over the organization, including the ability to manage users, projects, and settings. They can also configure security policies, access levels, and billing information. Ensure that the owner is aware of their responsibilities and has the necessary permissions to effectively manage the organization.

> This query will check if the owner has any of the following words as part of their name to conclude that it is not a regular user: (adm|admin|btg|svc|service)

#### Remediation action

Ensure that the owner is not a regular user.

1. Sign in to your organization.
2. Choose Organization settings.
3. Select Overview > Change owner.
4. Select an identity from the dropdown menu, or search for an identity by entering the identity's name, and then select Change.

#### Related links

* [Learn - Change the organization owner](https://learn.microsoft.com/azure/devops/organizations/accounts/change-organization-ownership?view=azure-devops)

## Details

<details>
<summary>Every attribute of this check</summary>

| Field | Value |
| --- | --- |
| Test ID | AZDO.1013 |
| Severity | High |
| Suite | Maester |
| Product | Azure DevOps |
| Feature | Users and access |
| Area | Privileged access |
| Resource type | User |
| User impact | Low |
| Implementation cost | Low |
| MITRE ATT&CK | T1078.004 Cloud Accounts |
| PowerShell test | [Test-AzdoOrganizationOwner](https://github.com/maester365/maester/blob/main/tests/maester/azure-devops/Test.AZDO.1013.ps1) |
| Services | AzureDevOps |
| Learn more | [https://learn.microsoft.com/azure/devops/organizations/accounts/change-organization-ownership?view=azure-devops](https://learn.microsoft.com/azure/devops/organizations/accounts/change-organization-ownership?view=azure-devops) |

</details>

## Source

- Test: [`tests/maester/azure-devops/Test.AZDO.1013.ps1`](https://github.com/maester365/maester/blob/main/tests/maester/azure-devops/Test.AZDO.1013.ps1)
- Documentation: [`tests/maester/azure-devops/Test.AZDO.1013.md`](https://github.com/maester365/maester/blob/main/tests/maester/azure-devops/Test.AZDO.1013.md)