last sync: 2024-Sep-19 17:51:32 UTC

Microsoft Managed Control 1207 - Access Restrictions For Change | Limit Production / Operational Privileges | Regulatory Compliance - Configuration Management

Azure BuiltIn Policy definition

Source Azure Portal
Display name Microsoft Managed Control 1207 - Access Restrictions For Change | Limit Production / Operational Privileges
Id 8713a0ed-0d1e-4d10-be82-83dffb39830e
Version 1.0.0
Details on versioning
Versioning Versions supported for Versioning: 0
Built-in Versioning [Preview]
Category Regulatory Compliance
Microsoft Learn
Description Microsoft implements this Configuration Management control
Additional metadata Name/Id: ACF1207 / Microsoft Managed Control 1207
Category: Configuration Management
Title: Access Restrictions For Change | Limit Production / Operational Privileges - Privilege Review
Ownership: Customer, Microsoft
Description: The organization: Reviews and reevaluates privileges Quarterly.
Requirements: Azure service teams review access at least quarterly, consistent with normal account review processes. Access to servers and network devices is reviewed for appropriateness on a quarterly basis through review of access levels for physical access.
Mode Indexed
Type Static
Preview False
Deprecated False
Effect Fixed
audit
RBAC role(s) none
Rule aliases none
Rule resource types IF (2)
Microsoft.Resources/subscriptions
Microsoft.Resources/subscriptions/resourceGroups
Compliance Not a Compliance control
Initiatives usage none
History none
JSON compare n/a
JSON
api-version=2021-06-01
EPAC