AzPolicyAdvertizer

last sync: 2025-Jun-13 17:23:19 UTC

[Deprecated]: External accounts with write permissions should be removed from your subscription

Azure BuiltIn Policy definition

Source Azure Portal
Display name [Deprecated]: External accounts with write permissions should be removed from your subscription
Id 5c607a2e-c700-4744-8254-d77e7c9eb5e4
Version 3.0.0-deprecated
Details on versioning
Versioning Versions supported for Versioning: 1
3.0.0 (3.0.0-deprecated)
Built-in Versioning [Preview]
Category Security Center
Microsoft Learn
Description This policy definition is no longer the recommended way to achieve its intent. Instead of continuing to use this policy, we recommend you assign this replacement policy with policy ID 94e1c2ac-cbbe-4cac-a2b5-389c812dee87. Learn more about policy definition deprecation at aka.ms/policydefdeprecation
Cloud environments AzureCloud = true
AzureUSGovernment = true
AzureChinaCloud = unknown
Available in AzUSGov The Policy is available in AzureUSGovernment cloud. Version: '3.0.0-deprecated'
Repository: Azure-Policy 5c607a2e-c700-4744-8254-d77e7c9eb5e4
Mode All
Type BuiltIn
Preview False
Deprecated True
Reference Reference to 1 related Policy definition (taken from description)
Guest accounts with write permissions on Azure resources should be removed (94e1c2ac-cbbe-4cac-a2b5-389c812dee87)
Effect Default
AuditIfNotExists
Allowed
AuditIfNotExists, Disabled
RBAC role(s) none
Rule aliases THEN-ExistenceCondition (1)
Alias Namespace ResourceType Path PathIsDefault DefaultPath Modifiable
Microsoft.Security/assessments/status.code Microsoft.Security assessments properties.status.code True False
Rule resource types IF (1)
Compliance Not a Compliance control
Initiatives usage none
History
Date/Time (UTC ymd) (i) Change type Change detail
2023-05-01 17:41:52 change Version remains equal, new suffix: deprecated (3.0.0 > 3.0.0-deprecated)
2021-01-05 16:06:49 change Major (2.0.0 > 3.0.0)
JSON compare
compare mode: version left: version right:
JSON
api-version=2021-06-01
EPAC