AzPolicyAdvertizer

last sync: 2025-Apr-29 17:16:02 UTC

Microsoft Managed Control 1303 - User Identification And Authentication | Local Access To Privileged Accounts | Regulatory Compliance - Identification and Authentication

Azure BuiltIn Policy definition

Source Azure Portal
Display name Microsoft Managed Control 1303 - User Identification And Authentication | Local Access To Privileged Accounts
Id 80ca0a27-918a-4604-af9e-723a27ee51e8
Version 1.0.1
Details on versioning
Versioning Versions supported for Versioning: 0
Built-in Versioning [Preview]
Category Regulatory Compliance
Microsoft Learn
Description Microsoft implements this Identification and Authentication control
Cloud environments AzureCloud = true
AzureUSGovernment = true
AzureChinaCloud = unknown
Available in AzUSGov The Policy is available in AzureUSGovernment cloud. Version: '1.0.0'
Repository: Azure-Policy 80ca0a27-918a-4604-af9e-723a27ee51e8
Additional metadata Name/Id: ACF1303 / Microsoft Managed Control 1303
Category: Identification and Authentication
Title: User Identification And Authentication | Local Access To Privileged Accounts
Ownership: Microsoft
Description: The information system implements multifactor authentication for local access to privileged accounts.
Requirements: Local access, defined as access to Azure via direct connection without the use of a network, is physically restricted at every component within Azure environment. Azure administration is performed via the private internal network unless a specific troubleshooting issue occurs that requires physical access to the asset. Therefore, there is no local access unless physical access is required. Local administrator access is only used to troubleshoot issues in instances where the asset is experiencing network issues and domain authentication is not working. Azure employs additional access control mechanisms for physical access to the environment. Rooms within the Azure datacenters and Global Cloud Collaboration Centers (GCCCs) that contain all Azure assets within the system boundary are restricted through various physical security mechanisms, including the requirement for smart card badging access and biometric devices.
Mode Indexed
Type Static
Preview False
Deprecated False
Effect Fixed
audit
RBAC role(s) none
Rule aliases none
Rule resource types IF (2)
Compliance
The following 1 compliance controls are associated with this Policy definition 'Microsoft Managed Control 1303 - User Identification And Authentication | Local Access To Privileged Accounts' (80ca0a27-918a-4604-af9e-723a27ee51e8)
Control Domain Control Name MetadataId Category Title Owner Requirements Description Info Policy#
NIS2 IM._Identity_Management_10 NIS2_IM._Identity_Management_10 NIS2_IM._Identity_Management_10 IM. Identity Management The use of multi-factor authentication Customer, Microsoft Cryptographic Module Authentication The use of multi-factor authentication or continuous authentication solutions, secured voice, video and text communications and secured emergency communication systems within the entity, where appropriate. 29
Initiatives usage
Initiative DisplayName Initiative Id Initiative Category State Type polSet in AzUSGov
[Preview]: NIS2 32ff9e30-4725-4ca7-ba3a-904a7721ee87 Regulatory Compliance Preview BuiltIn unknown
History
Date/Time (UTC ymd) (i) Change type Change detail
2022-04-01 20:29:14 change Patch (1.0.0 > 1.0.1)
JSON compare
compare mode: version left: version right:
JSON
api-version=2021-06-01
EPAC