Azure Active directory basic properties setting through policy or blueprint

Question

I want to set the basic AD policies in My tenant as mentioned in this article (under Identities section) . example - some user setting attributes or MFA settings which should be "yes or No" https://hub.steampipe.io/mods/turbot/azure_compliance/controls/control.cis_v130_1_1?context=benchmark.cis_v130/benchmark.cis_v130_1 What is the best way to implement all the basic security settings, is it through policies or blueprint.

is it possible to use policies to set Azure ad properties - like User settings, device settings or we can only use Grapoh api and Powershell to update it? Please suggest the recommended one as we have multitanent env so we will use the approach in other tenant also.

Answer 1

Hi, Azure Policy covers only Azure resources. Azure AD is separate service and not part of Azure services. So answer is no. To manage Azure AD use other tools like Azure AD PowerShell module or Microsoft Graph PowerShell module. Please "Accept the answer" if the information helped you. This will help us and others in the community as well.