AzPolicyAdvertizer

last sync: 2021-Nov-26 17:15:01 UTC

Azure Policy definition

Configure Machine Learning computes to disable local authentication methods

Name Configure Machine Learning computes to disable local authentication methods
Azure Portal
Id a6f9a2d0-cff7-4855-83ad-4cd750666512
Version 1.0.0
details on versioning
Category Machine Learning
Microsoft docs
Description Disable location authentication methods so that your Machine Learning computes require Azure Active Directory identities exclusively for authentication. Learn more at: https://aka.ms/azure-ml-aad-policy.
Mode Indexed
Type BuiltIn
Preview FALSE
Deprecated FALSE
Effect Default: Modify
Allowed: (Modify, Disabled)
Used RBAC Role
Role Name Role Id
Contributor b24988ac-6180-42a0-ab88-20f7382dd24c
History
Date/Time (UTC ymd) (i) Change type Change detail
2021-05-11 14:06:18 add a6f9a2d0-cff7-4855-83ad-4cd750666512
Used in Initiatives none
JSON 
{
  "displayName": "Configure Machine Learning computes to disable local authentication methods",
  "policyType": "BuiltIn",
  "mode": "Indexed",
  "description": "Disable location authentication methods so that your Machine Learning computes require Azure Active Directory identities exclusively for authentication. Learn more at: https://aka.ms/azure-ml-aad-policy.",
  "metadata": {
    "version": "1.0.0",
    "category": "Machine Learning"
  },
  "parameters": {
    "effect": {
      "type": "String",
      "metadata": {
        "displayName": "Effect",
        "description": "Enable or disable the execution of the policy"
      },
      "allowedValues": [
        "Modify",
        "Disabled"
      ],
      "defaultValue": "Modify"
    }
  },
  "policyRule": {
    "if": {
      "allOf": [
        {
          "field": "type",
          "equals": "Microsoft.MachineLearningServices/workspaces/computes"
        },
        {
          "field": "Microsoft.MachineLearningServices/workspaces/computes/disableLocalAuth",
          "notEquals": true
        }
      ]
    },
    "then": {
      "effect": "[parameters('effect')]",
      "details": {
        "conflictEffect": "audit",
        "roleDefinitionIds": [
          "/providers/microsoft.authorization/roleDefinitions/b24988ac-6180-42a0-ab88-20f7382dd24c"
        ],
        "operations": [
          {
            "operation": "addOrReplace",
            "field": "Microsoft.MachineLearningServices/workspaces/computes/disableLocalAuth",
            "value": true
          }
        ]
      }
    }
  }
}