last sync: 2024-Nov-25 18:54:24 UTC

Microsoft Managed Control 1032 - Separation Of Duties | Regulatory Compliance - Access Control

Azure BuiltIn Policy definition

Source Azure Portal
Display name Microsoft Managed Control 1032 - Separation Of Duties
Id 5aa85661-d618-46b8-a20f-ca40a86f0751
Version 1.0.0
Details on versioning
Versioning Versions supported for Versioning: 0
Built-in Versioning [Preview]
Category Regulatory Compliance
Microsoft Learn
Description Microsoft implements this Access Control control
Additional metadata Name/Id: ACF1032 / Microsoft Managed Control 1032
Category: Access Control
Title: Separation of Duties - Duty Separation Documentation
Ownership: Customer, Microsoft
Description: The organization: Documents separation of duties of individuals; and
Requirements: Azure documents separation of duties in the Azure Access Control SOP, the Azure Software Change and Release Management SOP, and Azure Hardware Change and Release Management SOP. Separation of duties is also enforced and documented via standard account approvals, JIT approvals, emergency access account incident tickets, and exception requests.
Mode Indexed
Type Static
Preview False
Deprecated False
Effect Fixed
audit
RBAC role(s) none
Rule aliases none
Rule resource types IF (2)
Microsoft.Resources/subscriptions
Microsoft.Resources/subscriptions/resourceGroups
Compliance Not a Compliance control
Initiatives usage none
History none
JSON compare n/a
JSON
api-version=2021-06-01
EPAC