Note
Access to this page requires authorization. You can try signing in or changing directories.
Access to this page requires authorization. You can try changing directories.
Microsoft Azure cloud environments meet demanding US government compliance requirements that produce formal authorizations, including:
- Federal Risk and Authorization Management Program (FedRAMP)
- Department of Defense (DoD) Cloud Computing Security Requirements Guide (SRG) Impact Level (IL) 2, 4, 5, and 6
- Joint Special Access Program (SAP) Implementation Guide (JSIG)
Azure (also known as Azure Commercial, Azure Public, or Azure Global) maintains the following authorizations that pertain to all Azure public regions in the United States:
- FedRAMP High Provisional Authorization to Operate (P-ATO) issued by the FedRAMP Joint Authorization Board (JAB)
- DoD IL2 Provisional Authorization (PA) issued by the Defense Information Systems Agency (DISA)
Azure Government maintains the following authorizations that pertain to Azure Government regions US Gov Arizona, US Gov Texas, and US Gov Virginia (US Gov regions):
- FedRAMP High P-ATO issued by the JAB
- DoD IL2 PA issued by DISA
- DoD IL4 PA issued by DISA
- DoD IL5 PA issued by DISA
For current Azure Government regions and available services, see Products available by region.
Note
- Some Azure services deployed in Azure Government regions US Gov Arizona, US Gov Texas, and US Gov Virginia (US Gov regions) require extra configuration to meet DoD IL5 compute and storage isolation requirements, as explained in Isolation guidelines for Impact Level 5 workloads.
- For DoD IL5 PA compliance scope in Azure Government regions US DoD Central and US DoD East (US DoD regions), see US DoD regions IL5 audit scope.
- For full list of M365 GCC high services authorized for FedRAMP High, see Microsoft Office 365 GCC High FedRAMP Marketplace. Azure Communication Services operates under the same infrastructure that powers Microsoft Teams and obtained FedRAMP High accreditation as part of the M365 GCC-High service offering.
Azure Government Secret maintains:
- DoD IL6 PA issued by DISA
- JSIG PL3 ATO (for authorization details, contact your Microsoft account representative)
Azure Government Top Secret maintains:
- ICD 503 ATO with facilities at ICD 705 (for authorization details, contact your Microsoft account representative)
- JSIG PL3 ATO (for authorization details, contact your Microsoft account representative)
This article provides a detailed list of Azure, Dynamics 365, Microsoft 365, and Power Platform cloud services in scope for FedRAMP High, DoD IL2, DoD IL4, DoD IL5, and DoD IL6 authorizations across Azure, Azure Government, and Azure Government Secret cloud environments. For other authorization details in Azure Government Secret and Azure Government Top Secret, contact your Microsoft account representative.
Azure public services by audit scope
Last updated: February 2026
Terminology used
- FedRAMP High = FedRAMP High Provisional Authorization to Operate (P-ATO) in Azure
- DoD IL2 = DoD SRG Impact Level 2 Provisional Authorization (PA) in Azure
- ✅ = service is included in audit scope and has been authorized
* FedRAMP High and DoD SRG Impact Level 2 authorization for Microsoft Entra ID applies to Microsoft Entra External ID. To learn more about Entra External ID, refer to the documentation here
** FedRAMP High authorization for Azure Databricks is applicable to limited regions in Azure. To configure Azure Databricks for FedRAMP High use, contact your Microsoft or Databricks representative.
*** FedRAMP High authorization for edge devices (such as Azure Data Box, Azure Stack Edge and Azure Local) applies only to Azure services that support on-premises, customer-managed devices. For example, FedRAMP High authorization for Azure Data Box covers datacenter infrastructure services and Data Box pod and disk service, which are the online software components supporting your Data Box hardware appliance. You are wholly responsible for the authorization package that covers the physical devices. For assistance with accelerating your onboarding and authorization of devices, contact your Microsoft account representative.
Azure Government services by audit scope
Last updated: February 2026
Terminology used
- Azure Government = Azure Government regions US Gov Arizona, US Gov Texas, and US Gov Virginia (US Gov regions)
- FedRAMP High = FedRAMP High Provisional Authorization to Operate (P-ATO) in Azure Government
- DoD IL2 = DoD SRG Impact Level 2 Provisional Authorization (PA) in Azure Government
- DoD IL4 = DoD SRG Impact Level 4 Provisional Authorization (PA) in Azure Government
- DoD IL5WI = DoD SRG Impact Level 5 Workload Isolation (IL5WI) Provisional Authorization (PA) in Azure Government
- DoD IL6 = DoD SRG Impact Level 6 Provisional Authorization (PA) in Azure Government Secret
- ✅ = service is included in audit scope and has been authorized
Note
- For DoD IL5 via Workload Isolation (IL5WI) PA compliance scope in Azure Government regions US Gov Arizona, US Gov Texas, and US Gov Virginia (US Gov regions), services require extra configuration to meet DoD IL5 compute and storage isolation requirements, as explained in Isolation guidelines for Impact Level 5 workloads.
- For DoD IL5 PA compliance scope in US DoD Central and US DoD East (US DoD regions), see US DoD regions IL5 audit scope.
* Authorizations for edge devices (such as Azure Data Box, Azure Stack Edge and Azure Local) apply only to Azure services that support on-premises, customer-managed devices. You are wholly responsible for the authorization package that covers the physical devices. For assistance with accelerating your onboarding and authorization of devices, contact your Microsoft account representative.
** Azure Information Protection (AIP) is part of the Microsoft Purview Information Protection solution - it extends the labeling and classification functionality provided by Microsoft 365. Before AIP can be used for DoD workloads at a given impact level (IL), the corresponding Microsoft 365 services must be authorized at the same IL.
Next steps
- Acquiring and accessing Azure Government
- Azure Government overview
- Azure Government security
- FedRAMP High
- DoD Impact Level 2
- DoD Impact Level 4
- DoD Impact Level 5
- DoD Impact Level 6
- Azure Government isolation guidelines for Impact Level 5 workloads
- Azure guidance for secure isolation
Federal Compliance Documentation
Azure compliance programs maintain federal compliance documentation on an access controlled private Microsoft website to ensure secure and professional handling of compliance documentation.
- To obtain access, stakeholders must provide information for one of the following sales channel:
- The full name and @microsoft.com email address of a Microsoft Point of Contact (POC) from Customer Service Account Management or a Cloud Solution Architect.
- The reseller company name if Azure Online Services were purchased through a reseller.
- The Microsoft Azure or M365 cloud tenant ID to confirm customer status.
- Once sales channel information is validated, access will be granted on an individual basis. Please provide the following information to process and provision access requests:
- Cloud instance in use (e.g., Azure Commercial, Azure Government, Azure DoD IL4 & IL5)
- Include the full names and email addresses of all individuals requiring access. Individuals granted access must not download or share documents with other stakeholders. You can send the requested information to the Azure Federal Documentation group email at AzFedDoc@microsoft.com.