AzPolicyAdvertizer

last sync: 2025-Jul-02 18:12:24 UTC

[Deprecated]: External accounts with read permissions should be removed from your subscription

Azure BuiltIn Policy definition

Source Azure Portal
Display name [Deprecated]: External accounts with read permissions should be removed from your subscription
Id 5f76cf89-fbf2-47fd-a3f4-b891fa780b60
Version 3.0.0-deprecated
Details on versioning
Versioning Versions supported for Versioning: 1
3.0.0 (3.0.0-deprecated)
Built-in Versioning [Preview]
Category Security Center
Microsoft Learn
Description This policy definition is no longer the recommended way to achieve its intent. Instead of continuing to use this policy, we recommend you assign this replacement policy with policy ID e9ac8f8e-ce22-4355-8f04-99b911d6be52. Learn more about policy definition deprecation at aka.ms/policydefdeprecation
Cloud environments AzureCloud = true
AzureUSGovernment = true
AzureChinaCloud = unknown
Available in AzUSGov The Policy is available in AzureUSGovernment cloud. Version: '3.0.0-deprecated'
Repository: Azure-Policy 5f76cf89-fbf2-47fd-a3f4-b891fa780b60
Mode All
Type BuiltIn
Preview False
Deprecated True
Reference Reference to 1 related Policy definition (taken from description)
Guest accounts with read permissions on Azure resources should be removed (e9ac8f8e-ce22-4355-8f04-99b911d6be52)
Effect Default
AuditIfNotExists
Allowed
AuditIfNotExists, Disabled
RBAC role(s) none
Rule aliases THEN-ExistenceCondition (1)
Alias Namespace ResourceType Path PathIsDefault DefaultPath Modifiable
Microsoft.Security/assessments/status.code Microsoft.Security assessments properties.status.code True False
Rule resource types IF (1)
Compliance Not a Compliance control
Initiatives usage none
History
Date/Time (UTC ymd) (i) Change type Change detail
2023-05-01 17:41:52 change Version remains equal, new suffix: deprecated (3.0.0 > 3.0.0-deprecated)
2021-01-05 16:06:49 change Major (2.0.0 > 3.0.0)
JSON compare
compare mode: version left: version right:
JSON
api-version=2021-06-01
EPAC