last sync: 2025-Apr-29 17:15:47 UTC

Configure SQL VMs and Arc-enabled SQL Servers to install Microsoft Defender extension

Azure BuiltIn Policy Initiative (PolicySet)

Source Azure Portal
Display nameConfigure SQL VMs and Arc-enabled SQL Servers to install Microsoft Defender extension
Idc1529623-9fc2-45bc-b84b-b14cd0b7484e
Version1.0.0
Details on versioning
Versioning Versions supported for Versioning: 1
1.0.0
Built-in Versioning [Preview]
CategorySecurity Center
Microsoft Learn
DescriptionMicrosoft Defender for SQL collects events from the agents and uses them to provide security alerts and tailored hardening tasks (recommendations).
Cloud environmentsAzureCloud = true
AzureChinaCloud = unknown
AzureUSGovernment = unknown
Available in AzUSGovUnknown, no evidence if PolicySet definition is/not available in AzureUSGovernment
TypeBuiltIn
DeprecatedFalse
PreviewFalse
Policy-used summary
Policy types Policy states Policy categories
Total Policies: 3
Builtin Policies: 3
Static Policies: 0
GA: 3
1 categories:
Security Center: 3
Policy-used
Policy DisplayName Policy Id Category Version Versioning Effect Roles# Roles State policy in AzUSGov
Assign System Assigned identity to SQL Virtual Machines 813e1e44-914e-436d-a2ab-84c4529a6084 Security Center 1.0.0 1x
1.0.0
Default
DeployIfNotExists
Allowed
DeployIfNotExists, Disabled
2 Managed Identity Operator, Virtual Machine Contributor GA unknown
Configure Arc-enabled SQL Servers to automatically install Microsoft Defender for SQL 65503269-6a54-4553-8a28-0065a8e6d929 Security Center 1.2.0 3x
1.2.0, 1.1.2, 1.1.1-preview
Default
DeployIfNotExists
Allowed
DeployIfNotExists, Disabled
1 Log Analytics Contributor GA true
Configure SQL Virtual Machines to automatically install Microsoft Defender for SQL extension 9345b7fb-67c5-496c-9f12-eaa74f676875 Security Center 1.0.0 1x
1.0.0
Default
DeployIfNotExists
Allowed
DeployIfNotExists, Disabled
1 Log Analytics Contributor GA unknown
Roles used Total Roles usage: 4
Total Roles unique usage: 3
Role Role Id #Policies Policies
Virtual Machine Contributor 9980e02c-c2be-4d73-94e8-173b1dc7cf3c 1 Assign System Assigned identity to SQL Virtual Machines
Managed Identity Operator f1a07417-d97a-45cb-824c-7a7467783830 1 Assign System Assigned identity to SQL Virtual Machines
Log Analytics Contributor 92aaf0da-9dab-42b6-94a3-d43ce8d16293 2 Configure Arc-enabled SQL Servers to automatically install Microsoft Defender for SQL, Configure SQL Virtual Machines to automatically install Microsoft Defender for SQL extension
History
Date/Time (UTC ymd) (i) Changes
2025-03-20 19:17:45 add Initiative c1529623-9fc2-45bc-b84b-b14cd0b7484e
JSON compare n/a
JSON
api-version=2023-04-01
EPAC