Control: Azure > AI Foundry > Account > Local Auth

Check or enforce local (API key) authentication on Azure > AI Foundry > Account resources.

The control compares the account's effective local-auth state to the policy. Enabled means local (API key) authentication is permitted (the Azure default); Disabled means only Microsoft Entra ID authentication is accepted. On mismatch the control raises an alarm and (on Enforce: ...) applies the desired setting.

Resource Types

This control targets the following resource types:

Azure > AI Foundry > Account

Policies

The following policies can be used to configure this control:

Azure > AI Foundry > Account > Local Auth

Permissions

Cloud permissions used by this control and its actions:

microsoft.cognitiveservices/accounts/write

In Your Workspace

Developers

Control Type URI

tmod:@turbot/azure-aifoundry#/control/types/accountLocalAuth

Category URI

tmod:@turbot/turbot#/control/categories/security

GraphQL

query controlType(id: "tmod:@turbot/azure-aifoundry#/control/types/accountLocalAuth") { … }

query controls(filter: "controlTypeId:'tmod:@turbot/azure-aifoundry#/control/types/accountLocalAuth'") { … }

CLI

Get Controls

turbot graphql controls --filter "controlTypeId:tmod:@turbot/azure-aifoundry#/control/types/accountLocalAuth"