Enterprise applications have owners
Overview
Section titled “Overview”Enterprise applications without owners become orphaned assets that threat actors can exploit. These applications often retain elevated permissions and access to sensitive resources while lacking proper oversight and security governance.
Applications without owners create blind spots in security monitoring where attackers can establish persistence by leveraging existing application permissions to access data or create backdoor accounts. The absence of ownership also prevents proper access reviews and permission audits, allowing applications with excessive permissions or outdated configurations to remain unmanaged.
Assigning owners enables effective application lifecycle management and ensures proper security oversight.
Remediation
Section titled “Remediation”Run it
Section titled “Run it”The check runs as part of the whole assessment, with the ZeroTrustAssessment module installed:
Install-Module ZeroTrustAssessment -Scope CurrentUserConnect-MaesterInvoke-Maester -Pack ZTA -SkipBuiltInLeave out -SkipBuiltIn to run Maester’s own checks in the same run.
About this check
| Severity | Medium |
| Effort to fix | Medium |
| Impact on users | Low |
| Pillar | Identity |
| Category | Application management |
| Product | Entra ID |
| Feature | Applications |
| Area | Applications and workload identities |
| Licence | Free |
| Tenant | Workforce |
Product, feature, area and ATT&CK are Maester’s: the assessment does not record them, so Maester keeps them in the pack’s taxonomy.json.
A Microsoft check, part of the Zero Trust Assessment pack. Text from ZeroTrustAssessment 3.1.0, © Microsoft, MIT licence.