last sync: 2024-Nov-25 18:54:24 UTC

Microsoft Managed Control 1064 - Remote Access | Privileged Commands / Access | Regulatory Compliance - Access Control

Azure BuiltIn Policy definition

Source Azure Portal
Display name Microsoft Managed Control 1064 - Remote Access | Privileged Commands / Access
Id eb4d9508-cbf0-4a3c-bb5c-6c95b159f3fb
Version 1.0.0
Details on versioning
Versioning Versions supported for Versioning: 0
Built-in Versioning [Preview]
Category Regulatory Compliance
Microsoft Learn
Description Microsoft implements this Access Control control
Additional metadata Name/Id: ACF1064 / Microsoft Managed Control 1064
Category: Access Control
Title: Remote Access | Privileged Commands / Access
Ownership: Customer, Microsoft
Description: The organization: Authorizes the execution of privileged commands and access to security-relevant information via remote access only for support of the operation system; and
Requirements: Azure authorizes the execution of all commands to users with elevated access who have been approved by an authorized manager and have a compelling operational need for access to an asset. Because Azure support personnel do not have physical access to the datacenters, there is a business requirement for those personnel to have remote access to conduct their work on the geographically dispersed Azure datacenter assets.
Mode Indexed
Type Static
Preview False
Deprecated False
Effect Fixed
audit
RBAC role(s) none
Rule aliases none
Rule resource types IF (2)
Microsoft.Resources/subscriptions
Microsoft.Resources/subscriptions/resourceGroups
Compliance Not a Compliance control
Initiatives usage none
History none
JSON compare n/a
JSON
api-version=2021-06-01
EPAC