Application registrations without owners
AI summary
Rencore Governance identifies Entra ID application registrations without assigned owners, creating accountability gaps for managing secrets, permissions, and lifecycle decisions. Assign at least one owner to each registration or delete unused ones to prevent orphaned apps from becoming security risks.
What it detects
Shows Application registrationsApp registrationAn app registration is the global definition of an application in Microsoft Entra ID.Read more without any owners.
Why it matters
Without an owner, nobody is accountable for an app registration: nobody renews its secrets, reviews its permissions or decides when it can be deleted. When a secret expires or a security question comes up, there is no one to ask. Add at least one owner, ideally two, or delete the registration if nobody uses it.
The rule
Every Application registration that has no Application owners
In Rencore Governance
Details
| Applies to | Application registration |
|---|---|
| Connector | Entra ID |
| Severity | Medium |
| Category | Operation |
| Recommended | No |
| Recommended automation | None |
| License type | Standard |
Related policies
Other policies that check Application registration objects:
Frequently asked questions
What does the application registrations without owners policy detect?
The Application registrations without owners policy shows Application registrations without any owners.
Which objects does the application registrations without owners policy check?
The Application registrations without owners policy checks Application registration objects from the Entra ID inventory and reports each one that matches its rule as a violation.
How severe is a violation of the application registrations without owners policy?
Violations of the Application registrations without owners policy have Medium severity. The policy is in the Operation category.
Which module includes the application registrations without owners policy?
The Application registrations without owners policy comes with the Entra ID connector in the Digital Workplace module of Rencore Governance, which every Plan includes.
Was this page helpful?
Thanks for the feedback.
Thanks. What was wrong?