No catalog should contain resources without any associated access packages
Why This Matters
Orphaned resources in Entra ID catalogs represent ungoverned assets that could expose your organization to compliance gaps. If a resource remains in a catalog without being tied to an access package, it may be accessible to users without proper entitlement review or audit tracking. IT administrators should regularly audit catalogs to ensure every resource is either actively governed or removed.
What Aether365 Checks
This check, listed under Entra ID in the Aether365 dashboard, verifies that no catalog contains resources that are not associated with any access package. It identifies orphaned resources that could be omitted from governance controls.