last sync: 2022-Sep-27 16:35:32 UTC

Azure Policy definition

Accounts with read permissions on Azure resources should be MFA enabled

Name Accounts with read permissions on Azure resources should be MFA enabled
Azure Portal
Id 81b3ccb4-e6e8-4e4a-8d05-5df25cd29fd4
Version 1.0.0
details on versioning
Category Security Center
Microsoft docs
Description Multi-Factor Authentication (MFA) should be enabled for all subscription accounts with read privileges to prevent a breach of accounts or resources.
Mode All
Type BuiltIn
Preview FALSE
Deprecated FALSE
Effect Default: AuditIfNotExists
Allowed: (AuditIfNotExists, Disabled)
Used RBAC Role none
Rule Aliases THEN-ExistenceCondition (1)
Alias Namespace ResourceType DefaultPath Modifiable
Microsoft.Security/assessments/status.code Microsoft.Security assessments properties.status.code false
Rule ResourceTypes IF (1)
Microsoft.Resources/subscriptions
History
Date/Time (UTC ymd) (i) Change type Change detail
2022-08-09 17:24:03 add 81b3ccb4-e6e8-4e4a-8d05-5df25cd29fd4
Used in Initiatives
Initiative DisplayName Initiative Id Initiative Category State Type
Azure Security Benchmark 1f3afdf9-d0c9-4c3d-847f-89da613e70a8 Security Center GA BuiltIn
JSON