policy name: project_has_too_many_admins
Projects owners are highly privileged and could create great damage if they are compromised. It is recommeneded to limit the number of Project OWners to the minimum required (recommended maximum 3 admins).
A compromised user with owner permissions can initiate a supply chain attack in a plethora of ways. Having many admin users increases the overall risk of user compromise, and makes it more likely to lose track of unused admin permissions given to users in the past.
- Make sure you have owner permissions
- Go to the Project Information -> Members page
- Select the unwanted owner users and remove the selected owners