From Azure Portal<br /><br />1. From the Azure Portal Home select the portal menu 2. Select Subscriptions 3. Select Manage Policies 4. Under Subscription leaving AAD directory and Subscription entering AAD directory select Permit no one<br /><br />Once verified, enter the date that this attestation expires. Note that the date can not be further in the future than is specified in report level Maximum Attestation Duration policy. Set to a blank value to clear the attestation. 

Azure > CIS v2.0

Azure > CIS v2.0 > 01 - Identity and Access Management > 1.25 Ensure That &#39;Subscription Entering AAD Directory&#39; and &#39;Subscription Leaving AAD Directory&#39; Is Set To &#39;Permit No One&#39;

Azure > CIS v2.0 > 01 - Identity and Access Management

From Azure Portal&#92;n&#92;n1. From the Azure Portal Home select the portal menu&#92;n2. Select Subscriptions&#92;n3. Select Manage Policies&#92;n4. Under Subscription leaving AAD directory and Subscription entering AAD directory select Permit no one&#92;n&#92;nOnce verified, enter the date that this attestation expires. Note that the&#92;ndate can not be further in the future than is specified in&#92;nreport level Maximum Attestation Duration policy.&#92;nSet to a blank value to clear the attestation.&#92;n

Azure > Subscription

Azure > CIS v2.0 > 01 - Identity and Access Management > 1.25 Ensure That &#39;Subscription Entering AAD Directory&#39; and &#39;Subscription Leaving AAD Directory&#39; Is Set To &#39;Permit No One&#39; > Attestation

Policy: Azure > CIS v2.0 > 01 - Identity and Access Management > 1.25 Ensure That 'Subscription Entering AAD Directory' and 'Subscription Leaving AAD Directory' Is Set To 'Permit No One' > Attestation

Resource Types

Primary Policy

Controls

Policy Specification

Category

In Your Workspace

Developers