ACR admin user enabled to bypass RBAC-scoped access

Emiliano Mema@Nosalva

•updated Jul 16, 2026•7•1•13

Detects when the administrative user is enabled for an Azure Container Registry (ACR). Enabling this account provides a static username and password, which may bypass more secure authentication methods like Azure Active Directory-based access and increase the risk of credential exposure.