TMA-GITLAB-2.1.11
Ensure minimum number of administrators are set for the build environment
Description
Ensure the build environment has a minimum number of administrators. Build environment administrators have the highest level of permissions, including the ability to add/remove users, create or delete pipelines, control build workers, change build trigger permissions and more. Due to the permissive access granted to a build environment administrator, it is highly recommended to keep the number of administrator accounts as minimal as possible.
How it is checked
Audit method: Manual review
This recommendation cannot be checked automatically. A scan lists it with these instructions when you pass --include-manual.
Verify that the build environment has only the minimum number of administrators. - On the left sidebar, select Search or go to and find your project. - Select Manage > Members. - At the top of the member list, from the dropdown list, select Max role the members have in the group and descending order. - If there are minimum number of members with Owner/Maintainer role in the list, you are compliant.
How it is fixed
Fix method: Guidance or infrastructure patch
Set the minimum number of administrators in the build environment. - On the left sidebar, select Search or go to and find your project. - Select Manage > Members. - At the top of the member list, from the dropdown list, select Max role the members have in the group and descending order. - Next to the project member you want to remove, select Remove member.
Properties
- Operating systems
- Any
- Tags
- devsecopsgitlab
- Reference
- CIS GitLab Benchmark v1.0.1 - 2.1.11 Ensure minimum number of administrators are set for the build environment