Azure Active directory basic properties setting through policy or blueprint

Azuretech 95 Reputation points

I want to set the basic AD policies in My tenant as mentioned in this article (under Identities section) . example - some user setting attributes or MFA settings which should be "yes or No" https://hub.steampipe.io/mods/turbot/azure_compliance/controls/control.cis_v130_1_1?context=benchmark.cis_v130/benchmark.cis_v130_1 What is the best way to implement all the basic security settings, is it through policies or blueprint.

is it possible to use policies to set Azure ad properties - like User settings, device settings or we can only use Grapoh api and Powershell to update it? Please suggest the recommended one as we have multitanent env so we will use the approach in other tenant also.

0 comments No comments

Sign in to comment

Answer accepted by question author

Stanislav Zhelyazkov 29,586 Reputation points MVP Volunteer Moderator

Hi, Azure Policy covers only Azure resources. Azure AD is separate service and not part of Azure services. So answer is no. To manage Azure AD use other tools like Azure AD PowerShell module or Microsoft Graph PowerShell module. Please "Accept the answer" if the information helped you. This will help us and others in the community as well.

0 comments No comments

Sign in to comment

0 additional answers

Sign in to answer

Your answer