Enterprise applications without owners
AI summary
Enterprise Applications without owners pose a security risk because no one reviews their access or removes unused apps, leaving permissions in place. Assign owners to applications you keep and remove those no one can account for.
What it detects
Shows Enterprise ApplicationsEnterprise applicationAn enterprise application is the local instance of an app in a Microsoft Entra tenant, its service principal, where admins control who can sign in and which permissions it holds.Read more without owners (excluding first-party Microsoft apps).
Why it matters
Enterprise applications are the apps that sign in to your tenant, including third-party apps that users or admins consented to. Without an owner, nobody reviews what an app can access or notices when it is no longer used, and its permissions stay in place. Assign an owner to each app you keep and remove the ones nobody can account for.
The rule
Every Enterprise Application where App Owner Organization Id not like 'f8cdef31-a31e-4b4a-93e4-5f571e91255a'
In Rencore Governance
Details
| Applies to | Enterprise application |
|---|---|
| Connector | Entra ID |
| Severity | Medium |
| Category | Operation |
| Recommended | No |
| Recommended automation | None |
| License type | Standard |
Related policies
Other policies that check Enterprise application objects:
- Enterprise applications using Exchange Web Services (EWS) (High)
- Enterprise applications that use SharePoint Online permissions (Information)
- Enterprise applications with full control or write permissions (Medium)
- Enterprise applications (SharePoint add-ins) with certificates or client secrets (Medium)
- Enterprise applications that use Microsoft Graph permissions (Information)
- Enterprise applications (SharePoint add-ins) with expired certificates or client secrets (Medium)
Frequently asked questions
What does the enterprise applications without owners policy detect?
The Enterprise applications without owners policy shows Enterprise Applications without owners (excluding first-party Microsoft apps).
Which objects does the enterprise applications without owners policy check?
The Enterprise applications without owners policy checks Enterprise application objects from the Entra ID inventory and reports each one that matches its rule as a violation.
How severe is a violation of the enterprise applications without owners policy?
Violations of the Enterprise applications without owners policy have Medium severity. The policy is in the Operation category.
Which module includes the enterprise applications without owners policy?
The Enterprise applications without owners policy comes with the Entra ID connector in the Digital Workplace module of Rencore Governance, which every Plan includes.
Was this page helpful?
Thanks for the feedback.
Thanks. What was wrong?