{
    "api_version": "1",
    "kind": "dse_post",
    "self": "https://update.dsesecurity.com/api/v1/posts/dse-20260917-130-check-resource-level-authority-when-an-azure-advisor-dismissal-fails/",
    "item": {
        "id": "https://update.dsesecurity.com/updates/dse-20260917-130-check-resource-level-authority-when-an-azure-advisor-dismissal-fails/",
        "slug": "dse-20260917-130-check-resource-level-authority-when-an-azure-advisor-dismissal-fails",
        "url": "https://update.dsesecurity.com/updates/dse-20260917-130-check-resource-level-authority-when-an-azure-advisor-dismissal-fails/",
        "alternate_urls": {
            "markdown": "https://update.dsesecurity.com/updates/dse-20260917-130-check-resource-level-authority-when-an-azure-advisor-dismissal-fails.md",
            "json": "https://update.dsesecurity.com/api/v1/posts/dse-20260917-130-check-resource-level-authority-when-an-azure-advisor-dismissal-fails/"
        },
        "title": "Check resource-level authority when an Azure Advisor dismissal fails",
        "summary": "A visible recommendation action can still fail its permission check.",
        "format": {
            "slug": "guide",
            "name": "Guide"
        },
        "priority": {
            "slug": "info",
            "name": "Information"
        },
        "featured": false,
        "image": {
            "theme": "cyber-defense",
            "label": "Cyber defense",
            "alt": "Layered glass and metal cyber-defense structure with controlled blue and gold signal paths.",
            "card_url": "https://update.dsesecurity.com/assets/editorial/cyber-defense-card.webp?v=1.8.20",
            "hero_url": "https://update.dsesecurity.com/assets/editorial/cyber-defense-hero.webp?v=1.8.20",
            "social_url": "https://update.dsesecurity.com/assets/editorial/cyber-defense-social-v2.jpg?v=1.8.20",
            "width": 2400,
            "height": 1350
        },
        "topics": [
            {
                "slug": "cybersecurity",
                "name": "Cybersecurity",
                "url": "https://update.dsesecurity.com/topic/cybersecurity/"
            },
            {
                "slug": "it",
                "name": "IT",
                "url": "https://update.dsesecurity.com/topic/it/"
            }
        ],
        "author": {
            "name": "DSE Security Editorial Team",
            "url": "https://update.dsesecurity.com/#editorial-team",
            "type": "Organization"
        },
        "publisher": {
            "name": "Detection Systems & Engineering",
            "url": "https://dsesecurity.com/"
        },
        "published_at": "2026-09-17T16:32:50+00:00",
        "modified_at": "2026-09-17T16:42:36+00:00",
        "reviewed_on": "2026-09-17",
        "reading_minutes": 1,
        "word_count": 207,
        "potentially_affected": "Use this review for a specific Advisor recommendation that the operator is authorized to manage. Identify its associated resource and the reason for the proposed disposition. Access to a recommendation screen should not be used as evidence that every action on every resource is authorized.",
        "dse_recommendation": "DSE recommends asking the resource owner to review both the requested disposition and the required action permission.",
        "primary_source": {
            "name": "Roles and permissions - Azure Advisor | Microsoft Learn",
            "url": "https://learn.microsoft.com/en-us/azure/advisor/permissions",
            "published_on": null,
            "authority": "Microsoft Learn"
        },
        "publishing_principles": "https://update.dsesecurity.com/updates/dse-updates-editorial-methodology/",
        "usage_info": "https://update.dsesecurity.com/usage/",
        "copyright_notice": "Copyright © 2026 Detection Systems & Engineering. All rights reserved.",
        "content_html": "<h2>Source facts</h2>\n<p>Microsoft&#8217;s Advisor permission guide says an error when postponing or dismissing a recommendation can indicate insufficient permission. Its prescribed check is the permission level on the resource associated with that recommendation, including whether the operator has Contributor or higher access there. <a href=\"https://learn.microsoft.com/en-us/azure/advisor/permissions\" target=\"_blank\" rel=\"noopener noreferrer\">Microsoft Learn</a>.</p>\n<h2>Applicability</h2>\n<p>Use this review for a specific Advisor recommendation that the operator is authorized to manage. Identify its associated resource and the reason for the proposed disposition. Access to a recommendation screen should not be used as evidence that every action on every resource is authorized.</p>\n<h2>DSE recommendation</h2>\n<p>DSE recommends asking the resource owner to review both the requested disposition and the required action permission. Prefer having an already authorized owner perform the approved action where appropriate, rather than granting broad additional access for convenience. Preserve the recommendation identifier, original status and rationale in the work record before changing it.</p>\n<h2>Verification</h2>\n<p>Inspect effective permissions at the associated resource and document the authorized route chosen. After the approved action, confirm the recommendation&#8217;s resulting state and ensure that the rationale remains accessible to the responsible team. Record any unresolved permission error without treating the attempted dismissal as complete. Include the recommendation in the owner&#8217;s ordinary review process.</p>\n<h2>Official references</h2>\n<p><a href=\"https://learn.microsoft.com/en-us/azure/advisor/permissions\" target=\"_blank\" rel=\"noopener noreferrer\">Microsoft Learn: Roles and permissions</a>.</p>",
        "content_text": "Source facts\nMicrosoft’s Advisor permission guide says an error when postponing or dismissing a recommendation can indicate insufficient permission. Its prescribed check is the permission level on the resource associated with that recommendation, including whether the operator has Contributor or higher access there. Microsoft Learn.\nApplicability\nUse this review for a specific Advisor recommendation that the operator is authorized to manage. Identify its associated resource and the reason for the proposed disposition. Access to a recommendation screen should not be used as evidence that every action on every resource is authorized.\nDSE recommendation\nDSE recommends asking the resource owner to review both the requested disposition and the required action permission. Prefer having an already authorized owner perform the approved action where appropriate, rather than granting broad additional access for convenience. Preserve the recommendation identifier, original status and rationale in the work record before changing it.\nVerification\nInspect effective permissions at the associated resource and document the authorized route chosen. After the approved action, confirm the recommendation’s resulting state and ensure that the rationale remains accessible to the responsible team. Record any unresolved permission error without treating the attempted dismissal as complete. Include the recommendation in the owner’s ordinary review process.\nOfficial references\nMicrosoft Learn: Roles and permissions.",
        "content_markdown": "## Source facts\n\nMicrosoft’s Advisor permission guide says an error when postponing or dismissing a recommendation can indicate insufficient permission. Its prescribed check is the permission level on the resource associated with that recommendation, including whether the operator has Contributor or higher access there. [Microsoft Learn](https://learn.microsoft.com/en-us/azure/advisor/permissions).\n\n## Applicability\n\nUse this review for a specific Advisor recommendation that the operator is authorized to manage. Identify its associated resource and the reason for the proposed disposition. Access to a recommendation screen should not be used as evidence that every action on every resource is authorized.\n\n## DSE recommendation\n\nDSE recommends asking the resource owner to review both the requested disposition and the required action permission. Prefer having an already authorized owner perform the approved action where appropriate, rather than granting broad additional access for convenience. Preserve the recommendation identifier, original status and rationale in the work record before changing it.\n\n## Verification\n\nInspect effective permissions at the associated resource and document the authorized route chosen. After the approved action, confirm the recommendation’s resulting state and ensure that the rationale remains accessible to the responsible team. Record any unresolved permission error without treating the attempted dismissal as complete. Include the recommendation in the owner’s ordinary review process.\n\n## Official references\n\n[Microsoft Learn: Roles and permissions](https://learn.microsoft.com/en-us/azure/advisor/permissions)."
    },
    "json_ld": {
        "@context": "https://schema.org",
        "@graph": [
            {
                "@type": "Organization",
                "@id": "https://dsesecurity.com/#organization",
                "name": "Detection Systems & Engineering",
                "alternateName": "DSE Security",
                "url": "https://dsesecurity.com/",
                "logo": {
                    "@type": "ImageObject",
                    "url": "https://update.dsesecurity.com/assets/dse-logo-20260812.png?v=1.8.20"
                }
            },
            {
                "@type": "Organization",
                "@id": "https://update.dsesecurity.com/#editorial-team",
                "name": "DSE Security Editorial Team",
                "url": "https://update.dsesecurity.com/",
                "parentOrganization": {
                    "@id": "https://dsesecurity.com/#organization"
                }
            },
            {
                "@type": "WebSite",
                "@id": "https://update.dsesecurity.com/#website",
                "name": "DSE Updates",
                "alternateName": "DSE Security Knowledge Hub",
                "url": "https://update.dsesecurity.com/",
                "inLanguage": "en-US",
                "publisher": {
                    "@id": "https://dsesecurity.com/#organization"
                },
                "potentialAction": {
                    "@type": "SearchAction",
                    "target": {
                        "@type": "EntryPoint",
                        "urlTemplate": "https://update.dsesecurity.com/?q={search_term_string}"
                    },
                    "query-input": "required name=search_term_string"
                }
            },
            {
                "@type": "WebPage",
                "@id": "https://update.dsesecurity.com/updates/dse-20260917-130-check-resource-level-authority-when-an-azure-advisor-dismissal-fails/",
                "url": "https://update.dsesecurity.com/updates/dse-20260917-130-check-resource-level-authority-when-an-azure-advisor-dismissal-fails/",
                "isPartOf": {
                    "@id": "https://update.dsesecurity.com/#website"
                },
                "lastReviewed": "2026-09-17"
            },
            {
                "@type": "BreadcrumbList",
                "@id": "https://update.dsesecurity.com/updates/dse-20260917-130-check-resource-level-authority-when-an-azure-advisor-dismissal-fails/#breadcrumbs",
                "itemListElement": [
                    {
                        "@type": "ListItem",
                        "position": 1,
                        "name": "DSE Updates",
                        "item": "https://update.dsesecurity.com/"
                    },
                    {
                        "@type": "ListItem",
                        "position": 2,
                        "name": "Check resource-level authority when an Azure Advisor dismissal fails",
                        "item": "https://update.dsesecurity.com/updates/dse-20260917-130-check-resource-level-authority-when-an-azure-advisor-dismissal-fails/"
                    }
                ]
            },
            {
                "@type": [
                    "Article",
                    "TechArticle"
                ],
                "@id": "https://update.dsesecurity.com/updates/dse-20260917-130-check-resource-level-authority-when-an-azure-advisor-dismissal-fails/#article",
                "identifier": "https://update.dsesecurity.com/updates/dse-20260917-130-check-resource-level-authority-when-an-azure-advisor-dismissal-fails/",
                "url": "https://update.dsesecurity.com/updates/dse-20260917-130-check-resource-level-authority-when-an-azure-advisor-dismissal-fails/",
                "headline": "Check resource-level authority when an Azure Advisor dismissal fails",
                "description": "A visible recommendation action can still fail its permission check.",
                "abstract": "A visible recommendation action can still fail its permission check.",
                "articleBody": "Source facts\nMicrosoft’s Advisor permission guide says an error when postponing or dismissing a recommendation can indicate insufficient permission. Its prescribed check is the permission level on the resource associated with that recommendation, including whether the operator has Contributor or higher access there. Microsoft Learn.\nApplicability\nUse this review for a specific Advisor recommendation that the operator is authorized to manage. Identify its associated resource and the reason for the proposed disposition. Access to a recommendation screen should not be used as evidence that every action on every resource is authorized.\nDSE recommendation\nDSE recommends asking the resource owner to review both the requested disposition and the required action permission. Prefer having an already authorized owner perform the approved action where appropriate, rather than granting broad additional access for convenience. Preserve the recommendation identifier, original status and rationale in the work record before changing it.\nVerification\nInspect effective permissions at the associated resource and document the authorized route chosen. After the approved action, confirm the recommendation’s resulting state and ensure that the rationale remains accessible to the responsible team. Record any unresolved permission error without treating the attempted dismissal as complete. Include the recommendation in the owner’s ordinary review process.\nOfficial references\nMicrosoft Learn: Roles and permissions.",
                "datePublished": "2026-09-17T16:32:50+00:00",
                "dateModified": "2026-09-17T16:42:36+00:00",
                "mainEntityOfPage": {
                    "@id": "https://update.dsesecurity.com/updates/dse-20260917-130-check-resource-level-authority-when-an-azure-advisor-dismissal-fails/"
                },
                "inLanguage": "en-US",
                "isAccessibleForFree": true,
                "author": {
                    "@type": "Organization",
                    "name": "DSE Security Editorial Team",
                    "url": "https://update.dsesecurity.com/#editorial-team"
                },
                "publisher": {
                    "@id": "https://dsesecurity.com/#organization"
                },
                "image": {
                    "@type": "ImageObject",
                    "@id": "https://update.dsesecurity.com/updates/dse-20260917-130-check-resource-level-authority-when-an-azure-advisor-dismissal-fails/#primaryimage",
                    "url": "https://update.dsesecurity.com/assets/editorial/cyber-defense-social-v2.jpg?v=1.8.20",
                    "contentUrl": "https://update.dsesecurity.com/assets/editorial/cyber-defense-social-v2.jpg?v=1.8.20",
                    "width": 1200,
                    "height": 630,
                    "caption": "Check resource-level authority when an Azure Advisor dismissal fails"
                },
                "articleSection": [
                    "Cybersecurity",
                    "IT"
                ],
                "keywords": [
                    "Cybersecurity",
                    "IT",
                    "Guide",
                    "Information priority"
                ],
                "genre": "Guide",
                "about": [
                    {
                        "@type": "Thing",
                        "name": "Cybersecurity",
                        "url": "https://update.dsesecurity.com/topic/cybersecurity/"
                    },
                    {
                        "@type": "Thing",
                        "name": "IT",
                        "url": "https://update.dsesecurity.com/topic/it/"
                    }
                ],
                "wordCount": 207,
                "timeRequired": "PT1M",
                "publishingPrinciples": "https://update.dsesecurity.com/updates/dse-updates-editorial-methodology/",
                "usageInfo": "https://update.dsesecurity.com/usage/",
                "copyrightHolder": {
                    "@id": "https://dsesecurity.com/#organization"
                },
                "copyrightNotice": "Copyright © 2026 Detection Systems & Engineering. All rights reserved.",
                "citation": {
                    "@type": "CreativeWork",
                    "name": "Roles and permissions - Azure Advisor | Microsoft Learn",
                    "url": "https://learn.microsoft.com/en-us/azure/advisor/permissions"
                }
            }
        ]
    }
}