Policy: Azure > CIS v2.0 > 01 - Identity and Access Management > 1.01 - Security Defaults > 1.01.03 Ensure that 'Multi-Factor Auth Status' is 'Enabled' for all Non-Privileged Users

Configures auditing against a CIS Benchmark item.

Level: 2

Enable multi-factor authentication for all non-privileged users.

Multi-factor authentication requires an individual to present a minimum of two separate forms of authentication before access is granted. Multi-factor authentication provides additional assurance that the individual attempting to gain access is who they claim to be. With multi-factor authentication, an attacker would need to compromise at least two different authentication mechanisms, increasing the difficulty of compromise and thus reducing the risk.

Targets

This policy targets the following resource types:

Azure > Active Directory > Directory

Primary Policy

This policy is used with the following primary policy:

Azure > CIS v2.0 > 01 - Identity and Access Management > 1.01 - Security Defaults

Azure > CIS v2.0 > 01 - Identity and Access Management > 1.01 - Security Defaults > 1.01.03 Ensure that 'Multi-Factor Auth Status' is 'Enabled' for all Non-Privileged Users > Attestation

Controls

Setting this policy configures this control:

Azure > CIS v2.0 > 01 - Identity and Access Management > 1.01 - Security Defaults > 1.01.03 Ensure that 'Multi-Factor Auth Status' is 'Enabled' for all Non-Privileged Users

Policy Specification

Schema Type	`string`
Default	`Per Azure > CIS v2.0 > 01 - Identity and Access Management`
Valid Values [YAML]	`Per Azure > CIS v2.0 > 01 - Identity and Access Management` `Skip` `Check: Benchmark using attestation`

In Your Workspace

Policy Settings by Type report

Developers

Category URI

tmod:@turbot/cis#/control/categories/v071603

Policy Type URI

tmod:@turbot/azure-cisv2-0#/policy/types/r010103

GraphQL

query policyType(id: "tmod:@turbot/azure-cisv2-0#/policy/types/r010103") { … }

query policySettings(filter: "policyTypeId:'tmod:@turbot/azure-cisv2-0#/policy/types/r010103'") { … }

query policyValues(filter: "policyTypeId:'tmod:@turbot/azure-cisv2-0#/policy/types/r010103'") { … }

CLI

Get Policy Type

turbot graphql policy-type --id "tmod:@turbot/azure-cisv2-0#/policy/types/r010103"

Get Policy Settings

turbot graphql policy-settings --filter "policyTypeId:tmod:@turbot/azure-cisv2-0#/policy/types/r010103"

Policy: Azure > CIS v2.0 > 01 - Identity and Access Management > 1.01 - Security Defaults > 1.01.03 Ensure that 'Multi-Factor Auth Status' is 'Enabled' for all Non-Privileged Users

Targets

This policy targets the following resource types:

Azure > Active Directory > Directory

Primary Policy

This policy is used with the following primary policy:

Azure > CIS v2.0 > 01 - Identity and Access Management > 1.01 - Security Defaults

Azure > CIS v2.0 > 01 - Identity and Access Management > 1.01 - Security Defaults > 1.01.03 Ensure that 'Multi-Factor Auth Status' is 'Enabled' for all Non-Privileged Users > Attestation

Controls

Setting this policy configures this control:

Azure > CIS v2.0 > 01 - Identity and Access Management > 1.01 - Security Defaults > 1.01.03 Ensure that 'Multi-Factor Auth Status' is 'Enabled' for all Non-Privileged Users

Policy Specification

Schema Type	`string`
Default	`Per Azure > CIS v2.0 > 01 - Identity and Access Management`
Valid Values [YAML]	`Per Azure > CIS v2.0 > 01 - Identity and Access Management` `Skip` `Check: Benchmark using attestation`

In Your Workspace

Policy Settings by Type report

Developers

Category URI

tmod:@turbot/cis#/control/categories/v071603

Policy Type URI

tmod:@turbot/azure-cisv2-0#/policy/types/r010103

GraphQL

query policyType(id: "tmod:@turbot/azure-cisv2-0#/policy/types/r010103") { … }

query policySettings(filter: "policyTypeId:'tmod:@turbot/azure-cisv2-0#/policy/types/r010103'") { … }

query policyValues(filter: "policyTypeId:'tmod:@turbot/azure-cisv2-0#/policy/types/r010103'") { … }

CLI

Get Policy Type

turbot graphql policy-type --id "tmod:@turbot/azure-cisv2-0#/policy/types/r010103"

Get Policy Settings

turbot graphql policy-settings --filter "policyTypeId:tmod:@turbot/azure-cisv2-0#/policy/types/r010103"

Policy: Azure > CIS v2.0 > 01 - Identity and Access Management > 1.01 - Security Defaults > 1.01.03 Ensure that 'Multi-Factor Auth Status' is 'Enabled' for all Non-Privileged Users

Targets

Primary Policy

Related Policies

Controls

Policy Specification

Category

In Your Workspace

Developers

Policy: Azure > CIS v2.0 > 01 - Identity and Access Management > 1.01 - Security Defaults > 1.01.03 Ensure that 'Multi-Factor Auth Status' is 'Enabled' for all Non-Privileged Users

Targets

Primary Policy

Related Policies

Controls

Policy Specification

Category

In Your Workspace

Developers