Policy: Azure > Compute > Disk > Data Access Authentication Mode

Define the data access authentication mode required for Azure > Compute > Disk.

The data access authentication mode decides who can use a disk's export (download) and upload URLs:

- Azure Active Directory: the user must also sign in with Microsoft Entra ID (Azure Active Directory's current name) and have the Data Operator for Managed Disks role. The URL alone isn't enough. - None: the URL alone is enough. A disk that has never had the setting counts as None.

Before enforcing Azure Active Directory, check what uses the disk's export and upload URLs. Azure Backup and Azure Site Recovery don't support disks set to Azure Active Directory, and tools that download or upload with only the URL stop working.

While a disk has an active export or upload URL, Azure refuses the change, so enforcement waits until access to the disk ends.