Microsoftazure

Azure Tenant Documentation
Contoso Technical Services
Date 06 July 2022 10:31:41
Author W-2K22\sysadmin
Version 1.03
Product XIA Configuration Server [14.0.19.0]

Table of Contents
Disclaimer 6
Azure Tenant Information 7
Client Information 8
Relationships 9
Relationship Map 10
Tenant Configuration 11
Hierarchy 12
Locations 13
Role Definitions 15
Azure Active Directory 16
Applications 17
XIA Automation Server 18
XIA Configuration Server 19
Users 20
Groups 21
All Company 22
Contoso Technical Services 23
Demonstration group 24
Example Distribution Group 25
Microsoft 365 Group 26
Security Group 27
SQL Azure Active Directory Administrators 28
Roles 29
Subscriptions 32
Contoso Azure Subscription 33
Alert Rules 35
Server Alert Rule 36
Invoices 37
Policy Assignments 38
ASC Default (subscription: 8de17e5b-5c38-42c0-86b8-b8f8c9a01b70) 39
Audit virtual machines without disaster recovery configured 40
IRS1075 September 2016 41
PCI v3.2.1:2018 42
Windows machines should meet requirements for 'Security Options - Network Security' 43
Resource Groups 44
DatabaseServers 45
LinuxServers 47
NetworkWatcherRG 53
WebServers 56
Resources 59
App Service Plans 60
app-service-plan-02 61
Availability Sets 63
CORP-AVAIL01 64
Classic Virtual Machines 66
DEMO-2K12R2-CLA 67
Disks 68
data1 69
data2 71
DEMO-2016-01_7581e04ddecd48f6a2d21454dce72e6c 73
DEMO-2016-02_ddbc3ab1e32c46d584c0d9c1e9a81300 75
DEMO-SRV22_OsDisk_1_d8b534b7e036400d88eba657b11240bf 77
Network Interfaces 79
demo-2012r2-02772 80
demo-2016-01905 82
demo-linux01297 84
demo-srv22467 86
TestDiskAccessEndpoint.nic.f4e7d243-870c-4aee-9194-55db26b99fc2 88
Network Security Groups 90
DEMO-2012R2-02-nsg 91
DEMO-2016-01-nsg 93
DEMO-LINUX01-nsg 95
DEMO-SRV22-nsg 97
Proximity Placement Groups 99
Example_Proximity_Placement_Group 100
Public IP Addresses 102
DEMO-2016-02-ip 103
Example-Virtual-Machine-Scale-Set-ip 105
Route Tables 107
route-table 108
SQL Databases 110
test-azure-sql/test-azure-sql-db 111
test-azure-sql-2/test-azure-sql-db 113
SQL Elastic Pools 115
test-azure-sql/test-azure-sql-elastic-pool 116
SQL Servers 118
test-azure-sql 119
test-azure-sql-2 122
Storage Accounts 125
blockblobstorageaccount1 126
filesharestorageaccount4 128
webserversdiag180 130
Virtual Machines 133
DEMO-2012R2-02 134
Storage 136
DEMO-2012R2-02 137
DEMO-2012R2-02-20180523-173419 138
DEMO-2016-01 139
Storage 141
DEMO-2016-01_7581e04ddecd48f6a2d21454dce72e6c 142
DEMO-LINUX01 143
Storage 145
DEMO-LINUX01 146
DEMO-SRV22 147
Storage 149
DEMO-SRV22_OsDisk_1_d8b534b7e036400d88eba657b11240bf 150
Virtual Networks 151
LinuxServers-vnet 152
Server2022Test-vnet 154
WebServers-vnet 156
WebServersvnet328 158
Web Apps 160
demo-web-app-02 161
Other Resource Types 165
Version History 166

Disclaimer
This document is for authorised use by the intended recipient(s) only. It may contain proprietary material,
confidential information and/or be subject to legal privilege. It should not be copied, disclosed to,
retained, or used by any other party.
Microsoft, Windows and Active Directory are either registered trademarks or trademarks of Microsoft
Corporation in the United States and/or other countries.
Page 6 of 166 Contoso Technical Services

Azure Tenant Information
Provides general information for this item.
General Information
Name Contoso Technical Services
Description This is a sample Azure item.
Primary Owner Name System Administrator
Primary Owner Contact sysadmin@contoso.com
System Information
Item Path Contoso Technical Services
Item ID 1018
Version ID 1.03
Check Out Status Available

Client Information
Provides information about the client that was used to generate the information and the data used by
the client to uniquely identify this item.
Item Identifiers
Primary Identifier contoso.onmicrosoft.com
Secondary Identifier 6c80f4a4-ba63-44bf-8cde-523cb3d3d06b
Tertiary Identifier
Environment Identifier
Client Information
Client Machine Name W-2K22
Client Identifier 5697298f-8c8d-41f8-b8bb-2e762b11ab6f
Client IP Address 192.168.131.213
Client Scan Date 28 June 2022 10:55 (8 days ago)
Client Service Username W-2K22\sysadmin
Client Version 14.0.19.0
Scan Profile
Target Service Principal: 2fabc88c-c58c-497d-984a-7c3586f89d14
Profile Name Scan Azure
Profile Identifier b76b7ce4-7396-4be9-b70a-1b80125a63f8

Relationships
Provides a summary of the relationships between this item and other items in the environment.
7 Relationships
Item ID Direction Name Type Relationship Type
1021 Outbound DEMO-2012R2-02 Windows Server Hosts Azure Windows Virtual Machine
1020 Outbound DEMO-2016-01 Windows Server Hosts Azure Windows Virtual Machine
1001 Outbound DEMO-SRV22 Windows Server Hosts Azure Windows Virtual Machine
1000 Outbound Contoso Technical Services Container Contained Within
1014 Outbound test-azure-sql.database.windows.net SQL Instance Hosts Azure SQL Database
1024 Outbound test-azure-sql-2.database.windows.net SQL Instance Hosts Azure SQL Database
1019 Outbound DEMO-LINUX01 Unix System Hosts Azure Unix Virtual Machine

Relationship Map

Tenant Configuration
An Azure tenant is an instance of Azure Active Directory and corresponding resources that represents an
organization.
General
Name Contoso Technical Services
Tenant Identifier 89171ce4-bd14-4b51-831d-2bbc55e9ee3a
Default Domain contoso.onmicrosoft.com
Information
Creation Date 22 September 2016 12:57:37
Business Phone Numbers 44(0)1234123456
Preferred Language English
Global Privacy Contact privacy@contoso.com
Global Privacy Statement URL https://www.contoso.com/privacy
Technical Contacts support@contoso.com
Privacy
Global Privacy Contact privacy@contoso.com
Global Privacy Statement URL https://www.contoso.com/privacy
Address
Street 1 Oxford Street
City Oxford
State, Province, or County Oxfordshire
ZIP or Postal Code OX12 3AB
Country United Kingdom

Hierarchy
An Azure tenant is an instance of Azure Active Directory and corresponding resources that represents an
organization.
Hierarchy
Name Type
Contoso Azure Subscription Subscription
DatabaseServers Resource Group
LinuxServers Resource Group
NetworkWatcherRG Resource Group
WebServers Resource Group

Locations
A location represents the city or area of an Azure region.
61 Locations
Display Name Name
Asia asia
Asia Pacific asiapacific
Australia australia
Australia Central australiacentral
Australia Central 2 australiacentral2
Australia East australiaeast
Australia Southeast australiasoutheast
Brazil brazil
Brazil South brazilsouth
Brazil Southeast brazilsoutheast
Canada canada
Canada Central canadacentral
Canada East canadaeast
Central India centralindia
Central US centralus
Central US EUAP centraluseuap
East Asia eastasia
East US eastus
East US 2 eastus2
East US 2 EUAP eastus2euap
Europe europe
France france
France Central francecentral
France South francesouth
Germany germany
Germany North germanynorth
Germany West Central germanywestcentral
Global global
India india
Japan japan
Japan East japaneast
Japan West japanwest
Korea korea

Korea Central koreacentral
Korea South koreasouth
North Central US northcentralus
North Europe northeurope
Norway norway
Norway East norwayeast
Norway West norwaywest
South Africa southafrica
South Africa North southafricanorth
South Africa West southafricawest
South Central US southcentralus
South India southindia
Southeast Asia southeastasia
Sweden Central swedencentral
Switzerland switzerland
Switzerland North switzerlandnorth
Switzerland West switzerlandwest
UAE Central uaecentral
UAE North uaenorth
UK South uksouth
UK West ukwest
United States unitedstates
West Central US westcentralus
West Europe westeurope
West India westindia
West US westus
West US 2 westus2
West US 3 westus3

Role Definitions
A role definition is a collection of permissions that can be performed, such as read, write, and delete.
Only information about custom role definitions is included.
4 Role Definitions
Display Name Description
Other : List Storage Account Keys Returns the access keys for the specified storage account.
Other : List Web App Security Sensitive Settings List Web App's security sensitive settings, such as publishing credentials, app settings
and connection strings.
Read : Get Web Apps Publishing XML Get Web Apps Publishing XML.
XIA Configuration Azure Reader This role has the required permissions to scan Azure from XIA Configuration.

Azure Active Directory
Azure Active Directory (Azure AD) is a cloud-based identity and access management service.
4 Domains
Display Name Default Verified Federated Initial
contoso.com False False False False
contoso.mail.onmicrosoft.com False True False False
contoso.onmicrosoft.com True True False True
testdomain.com False False False False

Applications
Provides information about the applications registered with Azure Active Directory.
2 Applications
Display Name Application Identifier Identifier
XIA Automation Server bdb40a3e-4406-4190-80de-2d9a8fcfd164 5ca42370-62aa-4e58-ac4e-f00b0de03b5f
XIA Configuration Server 2fabc88c-c58c-497d-984a-7c3586f89d14 ba475825-cdd2-400d-b671-6deaf502c4ff

XIA Automation Server
General
Application Identifier bdb40a3e-4406-4190-80de-2d9a8fcfd164
Display Name XIA Automation Server
Identifier 5ca42370-62aa-4e58-ac4e-f00b0de03b5f
3 Credentials
Display Name Type Start Expiry Date Thumbprint

Date
CN=CENTRESolutionsClient.org Certificate 24 May 24 May BE4BCA8C388AF02EE1C50C3F5F74D6A34FE97DAF

2021 2031
CN=sample.certificate.com Certificate 19 19 A9D93AF1424932FEF71CA58BC722D101F454B1EA

February February
2021 2023
XIA Automation Server client secret Password 19 19 Not Applicable

February February
2021 2022

XIA Configuration Server
General
Application Identifier 2fabc88c-c58c-497d-984a-7c3586f89d14
Display Name XIA Configuration Server
Identifier ba475825-cdd2-400d-b671-6deaf502c4ff
1 Credentials
Display Name Type Start Date Expiry Date Thumbprint
XIA Configuration access Password 27 June 2022 27 December 2022 Not Applicable

Users
Provides information about the users configured in the Azure Active Directory.
7 Users
Display Name User Principal Name Enabled
Admin admin@contoso.onmicrosoft.com True
support support_contoso.com#EXT#@contoso.onmicrosoft.com True
GlobalReader GlobalReader@contoso.onmicrosoft.com True
System Administrator sysadmin@contoso.onmicrosoft.com True
HRCalendar HRCalendar@contoso.onmicrosoft.com True
Xia xia@contoso.onmicrosoft.com True
XiaConfigurationAgent XiaConfigurationAgent@contoso.onmicrosoft.com True

Groups
Provides information about the groups configured in the Azure Active Directory.
7 Groups
Display Name Type
All Company Microsoft 365
Contoso Technical Services Microsoft 365
Demonstration group Microsoft 365
Example Distribution Group Distribution
Microsoft 365 Group Microsoft 365
Security Group Security
SQL Azure Active Directory Administrators Security

All Company
General
Display Name All Company
Email AllCompany.11491393537.ngluqlff@contoso.onmicrosoft.com
Group Type Microsoft 365
Identifier 239dc90f-f367-434e-9e01-68c9cb30154f
0 Direct Group Members
There are no direct group members found.

Contoso Technical Services
General
Display Name Contoso Technical Services
Email ContosoTechnicalServices@contoso.onmicrosoft.com
Identifier e7cbaecb-0e36-4e77-b234-ccef5a2a4321
Display Name Type
Admin User
support User
GlobalReader User
System Administrator User
Xia User
XiaConfigurationAgent User

Demonstration group
General
Display Name Demonstration group
Email 0b093dfa-ea0c-4d5d-9e04-1d28d9503bfb@contoso.onmicrosoft.com
Identifier 815bd2c6-9eb8-4931-ab1b-4a676c53b4d0
Display Name Type

Example Distribution Group
General
Display Name Example Distribution Group
Email distributiongroup@contoso.onmicrosoft.com
Group Type Distribution
Identifier 9eebc6ef-b675-43d1-be93-e5d7f7fe0f00

Microsoft 365 Group
General
Display Name Microsoft 365 Group
Email Microsoft365Group@contoso.onmicrosoft.com
Identifier a1e0032c-8904-4ecb-b6b8-6d146b124f61

Security Group
General
Display Name Security Group
Email
Group Type Security
Identifier 8f42d43f-28e6-429e-87bc-dbd010817198

SQL Azure Active Directory Administrators
General
Display Name SQL Azure Active Directory Administrators
Email
Group Type Security
Identifier d783d024-177b-4a3f-afb6-9dfa91e6e8fa
Display Name Type
Admin User

Roles
Administrative roles group together sets of permissions and are used for granting access for privileged
actions in Azure Active Directory.
89 Roles
Display Name Type Description
Application Administrator Built-In Can create and manage all aspects of app registrations and enterprise apps.
Application Developer Built-In Can create application registrations independent of the 'Users can register
applications' setting.
Attack Payload Author Built-In Can create attack payloads that an administrator can initiate later.
Attack Simulation Administrator Built-In Can create and manage all aspects of attack simulation campaigns.
Attribute Assignment Administrator Built-In Assign custom security attribute keys and values to supported Azure AD
objects.
Attribute Assignment Reader Built-In Read custom security attribute keys and values for supported Azure AD
objects.
Attribute Definition Administrator Built-In Define and manage the definition of custom security attributes.
Attribute Definition Reader Built-In Read the definition of custom security attributes.
Authentication Administrator Built-In Can access to view, set and reset authentication method information for any
non-admin user.
Authentication Policy Administrator Built-In Can create and manage the authentication methods policy, tenant-wide MFA
settings, password protection policy, and verifiable credentials.
Azure AD Joined Device Local Administrator Built-In Users assigned to this role are added to the local administrators group on
Azure AD-joined devices.
Azure DevOps Administrator Built-In Can manage Azure DevOps organization policy and settings.
Azure Information Protection Administrator Built-In Can manage all aspects of the Azure Information Protection product.
B2C IEF Keyset Administrator Built-In Can manage secrets for federation and encryption in the Identity Experience
Framework (IEF).
B2C IEF Policy Administrator Built-In Can create and manage trust framework policies in the Identity Experience
Framework (IEF).
Billing Administrator Built-In Can perform common billing related tasks like updating payment information.
Cloud App Security Administrator Built-In Can manage all aspects of the Cloud App Security product.
Cloud Application Administrator Built-In Can create and manage all aspects of app registrations and enterprise apps
except App Proxy.
Cloud Device Administrator Built-In Limited access to manage devices in Azure AD.
Compliance Administrator Built-In Can read and manage compliance configuration and reports in Azure AD and
Microsoft 365.
Compliance Data Administrator Built-In Creates and manages compliance content.
Conditional Access Administrator Built-In Can manage Conditional Access capabilities.
Customer LockBox Access Approver Built-In Can approve Microsoft support requests to access customer organizational
data.
Desktop Analytics Administrator Built-In Can access and manage Desktop management tools and services.
Device Join Built-In Deprecated - Do Not Use.
Device Managers Built-In Deprecated - Do Not Use.
Device Users Built-In Deprecated - Do Not Use.

Directory Readers Built-In Can read basic directory information. Commonly used to grant directory read
access to applications and guests.
Directory Synchronization Accounts Built-In Only used by Azure AD Connect service.
Directory Writers Built-In Can read and write basic directory information. For granting access to
applications, not intended for users.
Domain Name Administrator Built-In Can manage domain names in cloud and on-premises.
Dynamics 365 Administrator Built-In Can manage all aspects of the Dynamics 365 product.
Edge Administrator Built-In Manage all aspects of Microsoft Edge.
Example Custom Role Custom This is an example custom role.
Exchange Administrator Built-In Can manage all aspects of the Exchange product.
Exchange Recipient Administrator Built-In Can create or update Exchange Online recipients within the Exchange Online
organization.
External ID User Flow Administrator Built-In Can create and manage all aspects of user flows.
External ID User Flow Attribute Administrator Built-In Can create and manage the attribute schema available to all user flows.
External Identity Provider Administrator Built-In Can configure identity providers for use in direct federation.
Global Administrator Built-In Can manage all aspects of Azure AD and Microsoft services that use Azure
AD identities.
Global Reader Built-In Can read everything that a Global Administrator can, but not update anything.
Groups Administrator Built-In Members of this role can create/manage groups, create/manage groups
settings like naming and expiration policies, and view groups activity and audit
reports.
Guest Inviter Built-In Can invite guest users independent of the 'members can invite guests' setting.
Guest User Built-In Default role for guest users. Can read a limited set of directory information.
Helpdesk Administrator Built-In Can reset passwords for non-administrators and Helpdesk Administrators.
Hybrid Identity Administrator Built-In Can manage AD to Azure AD cloud provisioning, Azure AD Connect, and
federation settings.
Identity Governance Administrator Built-In Manage access using Azure AD for identity governance scenarios.
Insights Administrator Built-In Has administrative access in the Microsoft 365 Insights app.
Insights Analyst Built-In Access the analytical capabilities in Microsoft Viva Insights and run custom
queries.
Insights Business Leader Built-In Can view and share dashboards and insights via the M365 Insights app.
Intune Administrator Built-In Can manage all aspects of the Intune product.
Kaizala Administrator Built-In Can manage settings for Microsoft Kaizala.
Knowledge Administrator Built-In Can configure knowledge, learning, and other intelligent features.
Knowledge Manager Built-In Has access to topic management dashboard and can manage content.
License Administrator Built-In Can manage product licenses on users and groups.
Message Center Privacy Reader Built-In Can read security messages and updates in Office 365 Message Center only.
Message Center Reader Built-In Can read messages and updates for their organization in Office 365 Message
Center only.
Network Administrator Built-In Can manage network locations and review enterprise network design insights
for Microsoft 365 Software as a Service applications.
Office Apps Administrator Built-In Can manage Office apps cloud services, including policy and settings
management, and manage the ability to select, unselect and publish 'what's
new' feature content to end-user's devices.
Partner Tier1 Support Built-In Do not use - not intended for general use.
Partner Tier2 Support Built-In Do not use - not intended for general use.

Password Administrator Built-In Can reset passwords for non-administrators and Password Administrators.
Power BI Administrator Built-In Can manage all aspects of the Power BI product.
Power Platform Administrator Built-In Can create and manage all aspects of Microsoft Dynamics 365, PowerApps
and Microsoft Flow.
Printer Administrator Built-In Can manage all aspects of printers and printer connectors.
Printer Technician Built-In Can register and unregister printers and update printer status.
Privileged Authentication Administrator Built-In Can access to view, set and reset authentication method information for any
user (admin or non-admin).
Privileged Role Administrator Built-In Can manage role assignments in Azure AD, and all aspects of Privileged
Identity Management.
Reports Reader Built-In Can read sign-in and audit reports.
Restricted Guest User Built-In Restricted role for guest users. Can read a limited set of directory information.
Search Administrator Built-In Can create and manage all aspects of Microsoft Search settings.
Search Editor Built-In Can create and manage the editorial content such as bookmarks, Q and As,
locations, floorplan.
Security Administrator Built-In Can read security information and reports, and manage configuration in Azure
AD and Office 365.
Security Operator Built-In Creates and manages security events.
Security Reader Built-In Can read security information and reports in Azure AD and Office 365.
Service Support Administrator Built-In Can read service health information and manage support tickets.
SharePoint Administrator Built-In Can manage all aspects of the SharePoint service.
Skype for Business Administrator Built-In Can manage all aspects of the Skype for Business product.
Teams Administrator Built-In Can manage the Microsoft Teams service.
Teams Communications Administrator Built-In Can manage calling and meetings features within the Microsoft Teams
service.
Teams Communications Support Engineer Built-In Can troubleshoot communications issues within Teams using advanced tools.
Teams Communications Support Specialist Built-In Can troubleshoot communications issues within Teams using basic tools.
Teams Devices Administrator Built-In Can perform management related tasks on Teams certified devices.
Usage Summary Reports Reader Built-In Can see only tenant level aggregates in Microsoft 365 Usage Analytics and
Productivity Score.
User Administrator Built-In Can manage all aspects of users and groups, including resetting passwords
for limited admins.
Virtual Visits Administrator Built-In Manage and share Virtual Visits information and metrics from admin centers
or the Virtual Visits app.
Windows 365 Administrator Built-In Can provision and manage all aspects of Cloud PCs.
Windows Update Deployment Administrator Built-In Can create and manage all aspects of Windows Update deployments through
the Windows Update for Business deployment service.
Workplace Device Join Built-In Deprecated - Do Not Use.

Subscriptions
A subscription is an agreement with Microsoft to use one or more Microsoft cloud platforms or services,
for which charges accrue based on either a per-user license fee or on cloud-based resource
consumption.
1 Subscriptions
Display Name Identifier State
Contoso Azure Subscription 8de17e5b-5c38-42c0-86b8-b8f8c9a01b70 Enabled (Active)

Contoso Azure Subscription
A subscription is an agreement with Microsoft to use one or more Microsoft cloud platforms or services,
for which charges accrue based on either a per-user license fee or on cloud-based resource
consumption.
General
Identifier 8de17e5b-5c38-42c0-86b8-b8f8c9a01b70
State Enabled (Active)
5 Locations
Display Name Name
UK South uksouth
East US eastus
2 Locks
Name Type Scope Scope Type
Delete lock Delete WebServers Resource Group
Read-only lock Read-Only CORP-AVAIL01 Resource

2 Role Assignments
Account Name Account Role Scope

Type
admin@contoso.onmicrosoft.com User Owner Contoso (Management Group, Inherited)
XIA Configuration Server App XIA Configuration Azure Reader This Resource

Alert Rules
Alerts provide proactive notifications of issues found within the Azure infrastructure or applications.
1 Alert Rules
Name Enabled Type Severity
Server Alert Rule True Metric 3 - Informational

Server Alert Rule
A role definition is a collection of permissions that can be performed, such as read, write, and delete.
General
Enabled True
Description This is a sample alert rule
Severity 3 - Informational
Type Display Name Metric
Scopes
Scopes /subscriptions/8de17e5b-5c38-42c0-86b8-b8f8c9a01b70/resourceGroups/WebServers/pr
oviders/Microsoft.Compute/virtualMachines/DEMO-2012R2-02
Metric Alert Rule
Automatically Resolve Alerts True
1 Conditions
Name Summary
Metric1 Whenever the average of metric 'Percentage CPU' is greater than 12.

Invoices
Provides information about the recent invoices for the subscription.
5 Invoices
Invoice Number Invoice Date Billed Amount Status
E123456789 23 June 2022 0.00 GBP Due
E123456788 23 May 2022 0.00 GBP Due
E123456787 23 April 2022 0.00 GBP Overdue
E123456786 23 March 2022 0.00 GBP Paid
E123456785 23 February 2022 0.00 GBP Void

Policy Assignments
Policy assignments help to enforce organizational standards and to assess compliance.
5 Policy Assignments
Display Name Scope
ASC Default (subscription: 8de17e5b-5c38-42c0-86b8-b8f8c9a01b70) Contoso Azure Subscription (Subscription)
Audit virtual machines without disaster recovery configured WebServers (Resource Group)
IRS1075 September 2016 WebServers (Resource Group)
PCI v3.2.1:2018 WebServers (Resource Group)
Windows machines should meet requirements for 'Security Options - Network Security' WebServers (Resource Group)

ASC Default (subscription: 8de17e5b-5c38-42c0-86b8-b8f8c9a01b70)
General
Assignment Type Initiative
Definition Display Name Azure Security Benchmark
Description This is the default set of policies monitored by Azure Security Center. It was automatically assigned as
part of onboarding to Security Center. The default assignment contains only audit policies. For more
information please visit https://aka.ms/ascpolicies
Enforcement Mode Enforced
Scope
Scope Contoso Azure Subscription
Scope Type Subscription
Compliance
Non-Compliant Policies 1
Non-Compliant Resources 26

Audit virtual machines without disaster recovery configured
General
Assignment Type Policy
Definition Display Name Audit virtual machines without disaster recovery configured
Description This example policy audits virtual machines without disaster recovery configured.
Enforcement Mode Not Enforced
Scope
Scope WebServers
Scope Type Resource Group
Compliance

IRS1075 September 2016
General
Definition Display Name IRS1075 September 2016
Description This is assignment IRS1075 September 2016.
Scope
Scope WebServers
Compliance

PCI v3.2.1:2018
General
Definition Display Name PCI v3.2.1:2018
Description
Scope
Scope WebServers
Compliance

Windows machines should meet requirements for 'Security Options - Network Security'
General
Assignment Type Policy
Definition Display Name Windows machines should meet requirements for 'Security Options - Network Security'
Description On machine
Scope
Scope WebServers
Compliance

Resource Groups
A resource group is a container that holds related resources for an Azure solution.
4 Resource Groups
Display Name Location
DatabaseServers West Europe
LinuxServers West Europe
NetworkWatcherRG West Europe
WebServers West Europe

DatabaseServers
General
Location Display Name West Europe
Subscription Name Contoso Azure Subscription
Subscription Identifier 8de17e5b-5c38-42c0-86b8-b8f8c9a01b70
3 Locations
Display Name Name
UK South uksouth
0 Locks
There are no locks found.
2 Role Assignments

Type

XIA Configuration Server App XIA Configuration Azure Contoso Azure Subscription (Subscription, Inherited)
Reader
6 Resources
Display Name Resource Type Location
c9portalvhdst1y6dds8f24r Microsoft.ClassicStorage/storageAccounts UK South
test-azure-sql SQL Server Sweden Central
test-azure-sql/test-azure-sql-db SQL Database Sweden Central
test-azure-sql-2 SQL Server Sweden Central
test-azure-sql-2/test-azure-sql-db SQL Database Sweden Central
test-azure-sql/test-azure-sql-elastic-pool SQL Elastic Pool West Europe

LinuxServers
General
2 Locations
Display Name Name
East US eastus
0 Locks
4 Role Assignments

Type
Demonstration group Group Reader This Resource

SuperManagedUser App Reader This Resource
Reader
Automation Script
{
"$schema":
"https://schema.management.azure.com/schemas/2019-04-01/deploymentTemplate.json#",
"contentVersion": "1.0.0.0",
"parameters": {
"virtualMachines_DEMO_LINUX01_name": {
"type": "String"
},
"networkInterfaces_demo_linux01297_name": {
"type": "String"
},
"virtualNetworks_LinuxServers_vnet_name": {
"type": "String"
},
"networkSecurityGroups_DEMO_LINUX01_nsg_name": {
"type": "String"
},
"userAssignedIdentities_SuperManagedUser_name": {
"type": "String"
},
"networkSecurityGroups_DEMO_2012R2_02_nsg_externalid": {
"type": "String"
}
},
"variables": {},
"resources": [
{
"type": "Microsoft.ManagedIdentity/userAssignedIdentities",
"apiVersion": "2018-11-30",
"name": "[parameters('userAssignedIdentities_SuperManagedUser_name')]",
"location": "eastus"
},
{
"type": "Microsoft.Network/networkSecurityGroups",
"apiVersion": "2020-11-01",
"name": "[parameters('networkSecurityGroups_DEMO_LINUX01_nsg_name')]",
"location": "westeurope",
"properties": {
"securityRules": [
{
"name": "default-allow-ssh",
"properties": {
"protocol": "TCP",
"sourcePortRange": "*",

"destinationPortRange": "22",
"sourceAddressPrefix": "*",
"destinationAddressPrefix": "*",
"access": "Allow",
"priority": 1000,
"direction": "Inbound",
"sourcePortRanges": [],
"destinationPortRanges": [],
"sourceAddressPrefixes": [],
"destinationAddressPrefixes": []
}
}
]
}
},
{
"type": "Microsoft.Network/virtualNetworks",
"apiVersion": "2020-11-01",
"name": "[parameters('virtualNetworks_LinuxServers_vnet_name')]",
"properties": {
"addressSpace": {
"addressPrefixes": [
"10.0.1.0/24"
]
},
"subnets": [
{
"name": "default",
"properties": {
"addressPrefix": "10.0.1.0/24",
"networkSecurityGroup": {
"id":
"[parameters('networkSecurityGroups_DEMO_2012R2_02_nsg_externalid')]"
},
"delegations": [],
"privateEndpointNetworkPolicies": "Enabled",
"privateLinkServiceNetworkPolicies": "Enabled"
}
}
],
"virtualNetworkPeerings": [],
"enableDdosProtection": false
}
},
{
"type": "Microsoft.Compute/virtualMachines",
"apiVersion": "2022-03-01",
"name": "[parameters('virtualMachines_DEMO_LINUX01_name')]",
"dependsOn": [

"[resourceId('Microsoft.Network/networkInterfaces',
parameters('networkInterfaces_demo_linux01297_name'))]"
],
"properties": {
"hardwareProfile": {
"vmSize": "Standard_DS1_v2"
},
"storageProfile": {
"imageReference": {
"publisher": "Canonical",
"offer": "UbuntuServer",
"sku": "12.04.5-LTS",
"version": "latest"
},
"osDisk": {
"osType": "Linux",
"name": "[parameters('virtualMachines_DEMO_LINUX01_name')]",
"createOption": "FromImage",
"vhd": {
"uri":
"[concat('https://webserversdisks769.blob.core.windows.net/vhds/',
parameters('virtualMachines_DEMO_LINUX01_name'), '20170103153129.vhd')]"
},
"caching": "ReadWrite"
},
"dataDisks": []
},
"osProfile": {
"computerName": "[parameters('virtualMachines_DEMO_LINUX01_name')]",
"adminUsername": "adminuser",
"linuxConfiguration": {
"disablePasswordAuthentication": false,
"patchSettings": {
"patchMode": "ImageDefault",
"assessmentMode": "ImageDefault"
}
},
"secrets": []
},
"networkProfile": {
"networkInterfaces": [
{
"id": "[resourceId('Microsoft.Network/networkInterfaces',
parameters('networkInterfaces_demo_linux01297_name'))]"
}
]
},
"diagnosticsProfile": {
"bootDiagnostics": {
"enabled": true,
"storageUri": "https://webserversdiag180.blob.core.windows.net/"

}
}
}
},
{
"type": "Microsoft.Network/networkSecurityGroups/securityRules",
"apiVersion": "2020-11-01",
"name": "[concat(parameters('networkSecurityGroups_DEMO_LINUX01_nsg_name'),
'/default-allow-ssh')]",
"dependsOn": [
"[resourceId('Microsoft.Network/networkSecurityGroups',
parameters('networkSecurityGroups_DEMO_LINUX01_nsg_name'))]"
],
"properties": {
"protocol": "TCP",
"sourcePortRange": "*",
"destinationPortRange": "22",
"sourceAddressPrefix": "*",
"destinationAddressPrefix": "*",
"access": "Allow",
"priority": 1000,
"direction": "Inbound",
"sourcePortRanges": [],
"destinationPortRanges": [],
"sourceAddressPrefixes": [],
"destinationAddressPrefixes": []
}
},
{
"type": "Microsoft.Network/virtualNetworks/subnets",
"apiVersion": "2020-11-01",
"name": "[concat(parameters('virtualNetworks_LinuxServers_vnet_name'),
'/default')]",
"dependsOn": [
"[resourceId('Microsoft.Network/virtualNetworks',
parameters('virtualNetworks_LinuxServers_vnet_name'))]"
],
"properties": {
"addressPrefix": "10.0.1.0/24",
"id": "[parameters('networkSecurityGroups_DEMO_2012R2_02_nsg_externalid')]"
},
"delegations": [],
"privateEndpointNetworkPolicies": "Enabled",
"privateLinkServiceNetworkPolicies": "Enabled"
}
},
{
"type": "Microsoft.Network/networkInterfaces",
"apiVersion": "2020-11-01",
"name": "[parameters('networkInterfaces_demo_linux01297_name')]",

"dependsOn": [
"[resourceId('Microsoft.Network/virtualNetworks/subnets',
parameters('virtualNetworks_LinuxServers_vnet_name'), 'default')]",
"[resourceId('Microsoft.Network/networkSecurityGroups',
],
"properties": {
"ipConfigurations": [
{
"name": "ipconfig1",
"properties": {
"privateIPAddress": "10.0.1.4",
"privateIPAllocationMethod": "Dynamic",
"subnet": {
"id": "[resourceId('Microsoft.Network/virtualNetworks/subnets',
parameters('virtualNetworks_LinuxServers_vnet_name'), 'default')]"
},
"primary": true,
"privateIPAddressVersion": "IPv4"
}
}
],
"dnsSettings": {
"dnsServers": []
},
"enableAcceleratedNetworking": false,
"enableIPForwarding": false,
"id": "[resourceId('Microsoft.Network/networkSecurityGroups',
}
}
}
]
}
5 Resources
DEMO-LINUX01 Virtual Machine West Europe
demo-linux01297 Network Interface West Europe
DEMO-LINUX01-nsg Network Security Group West Europe
LinuxServers-vnet Virtual Network West Europe
SuperManagedUser Microsoft.ManagedIdentity/userAssignedIdentities East US

NetworkWatcherRG
General
3 Locations
Display Name Name
East US eastus
UK South uksouth
0 Locks
2 Role Assignments

Type

Reader
Automation Script
{
"$schema":
"https://schema.management.azure.com/schemas/2019-04-01/deploymentTemplate.json#",
"contentVersion": "1.0.0.0",
"parameters": {
"networkWatchers_NetworkWatcher_eastus_name": {
"type": "String"
},
"networkWatchers_NetworkWatcher_uksouth_name": {
"type": "String"
},
"networkWatchers_NetworkWatcher_westeurope_name": {
"type": "String"
}
},
"variables": {},
"resources": [
{
"type": "Microsoft.Network/networkWatchers",
"apiVersion": "2020-11-01",
"name": "[parameters('networkWatchers_NetworkWatcher_eastus_name')]",
"location": "eastus",
"properties": {
"provisioningState": "Succeeded",
"runningOperationIds": []
}
},
{
"apiVersion": "2020-11-01",
"name": "[parameters('networkWatchers_NetworkWatcher_uksouth_name')]",
"location": "uksouth",
"properties": {
}
},
{
"apiVersion": "2020-11-01",
"name": "[parameters('networkWatchers_NetworkWatcher_westeurope_name')]",
"properties": {

}
}
]
}
3 Resources
NetworkWatcher_eastus Microsoft.Network/networkWatchers East US
NetworkWatcher_uksouth Microsoft.Network/networkWatchers UK South
NetworkWatcher_westeurope Microsoft.Network/networkWatchers West Europe

WebServers
General
3 Locations
Display Name Name
UK South uksouth
2 Locks
2 Role Assignments

Type

Reader
41 Resources
app-service-plan-02 App Service Plan UK South
blockblobstorageaccount1 Storage Account UK South
CORP-AVAIL01 Availability Set West Europe
data1 Disk UK South
data2 Disk UK South
DEMO-2012R2-02 Virtual Machine West Europe
demo-2012r2-02772 Network Interface West Europe
DEMO-2012R2-02-nsg Network Security Group West Europe
DEMO-2016-01 Virtual Machine West Europe
DEMO-2016-01_7581e04ddecd48f6a2d21454dce72e6c Disk West Europe
demo-2016-01905 Network Interface West Europe
DEMO-2016-01-nsg Network Security Group West Europe
DEMO-2016-02_ddbc3ab1e32c46d584c0d9c1e9a81300 Disk West Europe
DEMO-2016-02-ip Public IP Address West Europe
DEMO-2K12R2-CLA Microsoft.ClassicCompute/domainNames UK South
DEMO-2K12R2-CLA Classic Virtual Machine UK South
DEMO-SRV22 Virtual Machine UK South
DEMO-SRV22_OsDisk_1_d8b534b7e036400d88eba657b11240bf Disk UK South
demo-srv22467 Network Interface UK South
DEMO-SRV22-nsg Network Security Group UK South
demo-web-app-01 microsoft.insights/components South Central

US
demo-web-app-02 Web App UK South
Example_Load_Balancer Microsoft.Network/loadBalancers West Europe
Example_Proximity_Placement_Group Proximity Placement Group West Europe
Example-Virtual-Machine-Scale-Set Microsoft.Compute/virtualMachineScaleSets West Europe
Example-Virtual-Machine-Scale-Set-ip Public IP Address West Europe
Example-Virtual-Machine-Scale-Set-lb Microsoft.Network/loadBalancers West Europe
filesharestorageaccount4 Storage Account UK South
privatelink.blob.core.windows.net Microsoft.Network/privateDnsZones Global
privatelink.database.windows.net Microsoft.Network/privateDnsZones Global
route-table Route Table West Europe
Server2022Test-vnet Virtual Network UK South
SRV22KeyVaultTest Microsoft.KeyVault/vaults UK South

TestDiskAccess Microsoft.Compute/diskAccesses West Europe
TestDiskAccessEndpoint Microsoft.Network/privateEndpoints West Europe
TestDiskAccessEndpoint.nic.f4e7d243-870c-4aee-9194-55db26b99fc2 Network Interface West Europe
TestDiskEncryptionSet Microsoft.Compute/diskEncryptionSets West Europe
Virtual_key Microsoft.Compute/sshPublicKeys West Europe
webserversdiag180 Storage Account West Europe
WebServers-vnet Virtual Network West Europe
WebServersvnet328 Virtual Network West Europe

Resources
A resource is an entity such as a virtual machine, virtual network, or storage account that is managed by
Azure.

App Service Plans
An app service plan defines a set of compute resources for a web app to run. These compute resources
are analogous to the server farm in conventional web hosting.
1 App Service Plan Resources
Name Subscription Name Location Operating System SKU

Type
app-service-plan-02 Contoso Azure Subscription UK South Windows F1

app-service-plan-02
An app service plan defines a set of compute resources for a web app to run. These compute resources
are analogous to the server farm in conventional web hosting.
General
Resource Type App Service Plan
Resource Group Name WebServers
Location
Location Display Name UK South
Properties
Maximum Workers 1
App Names demo-web-app-02
Operating System Type Windows
Zone Redundant False
SKU
SKU Name F1
SKU Tier Free
SKU Capacity 0
1 Locks

2 Role Assignments

Type
Reader

Availability Sets
An availability set is a logical grouping of VMs that allows Azure to understand how your application is
built to provide for redundancy and availability.
1 Availability Set Resources
Name Subscription Name Location SKU Type
CORP-AVAIL01 Contoso Azure Subscription West Europe Classic (Unmanaged)

CORP-AVAIL01
An availability set is a logical grouping of VMs that allows Azure to understand how your application is
built to provide for redundancy and availability.
General
Resource Type Availability Set
Location
Properties
Fault Domains 3
Update Domains 5
Proximity Placement Group
Proximity Placement Group Name Example_Proximity_Placement_Group
SKU
SKU Type Classic (Unmanaged)
1 Virtual Machines
Name Size Operating System Generation
DEMO-2012R2-02 Standard_DS1_v2 Windows Server 2012 R2 Datacenter V1
2 Locks

2 Role Assignments

Type
Reader

Classic Virtual Machines
A classic Azure virtual machine (VM) is an on-demand, scalable computing resource based on
deprecated technology.
Classic virtual machines are deprecated, and only basic resource information is available.
1 Classic Virtual Machine Resources
Name Subscription Name Location
DEMO-2K12R2-CLA Contoso Azure Subscription UK South

DEMO-2K12R2-CLA
A classic Azure virtual machine (VM) is an on-demand, scalable computing resource based on
deprecated technology.
Classic virtual machines are deprecated, and only basic resource information is available.
General
Resource Type Classic Virtual Machine
Location
1 Locks
2 Role Assignments

Type
Reader

Disks
Azure managed disks are block-level storage volumes that are managed by Azure and used with Azure
Virtual Machines.
5 Disk Resources
data1 Contoso Azure Subscription UK South Premium LRS
data2 Contoso Azure Subscription UK South Standard LRS
DEMO-2016-01_7581e04ddecd48f6a2d21454dce72e6c Contoso Azure Subscription West Europe Premium LRS
DEMO-2016-02_ddbc3ab1e32c46d584c0d9c1e9a81300 Contoso Azure Subscription West Europe Standard LRS
DEMO-SRV22_OsDisk_1_d8b534b7e036400d88eba657b11240bf Contoso Azure Subscription UK South Standard LRS

data1
Virtual Machines.
General
Resource Type Disk
Location
Properties
On Demand Bursting System Default
Date Created 10 March 2022 13:17:43
Disk State Unattached
Managed By
Security Type Standard
Zones
SKU
SKU Type Premium LRS
Tier P1
Disk Size 4 GB
Provisioned Throughput 25
Provisioned IOPS 120

Encryption
Server Side Encryption Type (Default) Encryption at-rest with a platform-managed key
Network Settings
Network Access Policy Public endpoint (all networks)
Shared Disk
Shared Disk Enabled False
1 Locks
2 Role Assignments

Type
Reader

data2
Virtual Machines.
General
Resource Type Disk
Location
Properties
Managed By
Zones
SKU
SKU Type Standard LRS
Tier
Disk Size 32 GB

Encryption
Network Settings
Shared Disk
1 Locks
2 Role Assignments

Type
Reader

DEMO-2016-01_7581e04ddecd48f6a2d21454dce72e6c
Virtual Machines.
General
Resource Type Disk
Resource Group Name WEBSERVERS
Location
Properties
Date Created 12 December 2021 11:14:14
Disk State Attached
Managed By DEMO-2016-01
Zones
SKU
Tier P2
Disk Size 8 GB

Encryption
Network Settings
Operating System
Shared Disk
0 Locks
2 Role Assignments

Type
Reader

DEMO-2016-02_ddbc3ab1e32c46d584c0d9c1e9a81300
Virtual Machines.
General
Resource Type Disk
Resource Group Name WEBSERVERS
Location
Properties
Managed By
Zones
SKU
Tier
Disk Size 127 GB

Encryption
Network Settings
Operating System
Shared Disk
0 Locks
2 Role Assignments

Type
Reader

DEMO-SRV22_OsDisk_1_d8b534b7e036400d88eba657b11240bf
Virtual Machines.
General
Resource Type Disk
Location
Properties
Disk State Attached
Managed By DEMO-SRV22
Zones
SKU
Tier
Disk Size 30 GB

Encryption
Network Settings
Operating System
Shared Disk
1 Locks
2 Role Assignments

Type
Reader

Network Interfaces
A network interface enables an Azure VM to communicate with internet, Azure, and on-premises
resources.
5 Network Interface Resources
Name Subscription Name Location Virtual Machine
demo-2012r2-02772 Contoso Azure West Europe DEMO-2012R2-02

Subscription
demo-2016-01905 Contoso Azure West Europe DEMO-2016-01

Subscription
demo-linux01297 Contoso Azure West Europe DEMO-LINUX01

Subscription
demo-srv22467 Contoso Azure UK South DEMO-SRV22

Subscription
TestDiskAccessEndpoint.nic.f4e7d243-870c-4aee-9194-55db26b99fc2 Contoso Azure West Europe

Subscription

demo-2012r2-02772
resources.
General
Resource Type Network Interface
Location
Properties
Accelerated Networking False
IP Forwarding False
MAC Address 00-0D-3A-22-CE-41
Network Security Group Name DEMO-2012R2-02-nsg
Virtual Machine Name DEMO-2012R2-02
DNS Settings
DNS Servers Inherit from virtual network
Applied DNS Servers
Internal DNS Name Label
Internal Domain Name Suffix ootfkz2ywjlellkioyb3dovwmc.ax.internal.cloudapp.net
Internal FQDN
1 IP Configurations

Name IP Version Private IP Address Public IP Address
ipconfig1 IPv4 10.0.0.4 (Dynamic)
1 Locks
2 Role Assignments

Type
Reader

demo-2016-01905
resources.
General
Location
Properties
IP Forwarding False
MAC Address 00-0D-3A-28-1D-92
Network Security Group Name DEMO-2016-01-nsg
Virtual Machine Name DEMO-2016-01
DNS Settings
Applied DNS Servers
Internal FQDN
1 IP Configurations

1 Locks
2 Role Assignments

Type
Reader

demo-linux01297
resources.
General
Resource Group Name LinuxServers
Location
Properties
IP Forwarding False
MAC Address 00-0D-3A-27-05-95
Network Security Group Name DEMO-LINUX01-nsg
Virtual Machine Name DEMO-LINUX01
DNS Settings
Applied DNS Servers
Internal Domain Name Suffix oq15wtd5gsfupe0m0g3nnsl3oh.ax.internal.cloudapp.net
Internal FQDN
1 IP Configurations

0 Locks
4 Role Assignments

Type
Demonstration group Group Reader LinuxServers (Resource Group, Inherited)
SuperManagedUser App Reader LinuxServers (Resource Group, Inherited)
Reader

demo-srv22467
resources.
General
Location
Properties
Accelerated Networking True
IP Forwarding False
MAC Address 00-22-48-40-F8-8E
Network Security Group Name DEMO-SRV22-nsg
Virtual Machine Name DEMO-SRV22
DNS Settings
Applied DNS Servers
Internal Domain Name Suffix k1d0xwhwliru5f214d220pkknf.zx.internal.cloudapp.net
Internal FQDN
1 IP Configurations

1 Locks
2 Role Assignments

Type
Reader

TestDiskAccessEndpoint.nic.f4e7d243-870c-4aee-9194-55db26b99fc2
resources.
General
Location
Properties
IP Forwarding False
MAC Address
Network Security Group Name
Virtual Machine Name
DNS Settings
Applied DNS Servers
Internal FQDN
1 IP Configurations

Name IP Version Private IP Address Public IP
Address
privateEndpointIpConfig.a3b2553e-ecca-4687-b09a-ce72f9db3e8f IPv4 10.0.0.8 (Dynamic)
1 Locks
2 Role Assignments

Type
Reader

Network Security Groups
An Azure network security group filters network traffic to and from Azure resources in an Azure virtual
network.
4 Network Security Group Resources
DEMO-2012R2-02-nsg Contoso Azure Subscription West Europe
DEMO-2016-01-nsg Contoso Azure Subscription West Europe
DEMO-LINUX01-nsg Contoso Azure Subscription West Europe
DEMO-SRV22-nsg Contoso Azure Subscription UK South

DEMO-2012R2-02-nsg
network.
General
Resource Type Network Security Group
Location
2 Inbound Rules (Default Rules Not Shown)
Priority Name Port Protocol Source Destination
1010 AllowFTP 21 TCP Any Any
1000 default-allow-rdp 3389 TCP Any Any
3 Outbound Rules (Default Rules Not Shown)
120 SampleRange 80-81 UDP Any Any
110 SampleSMTPRule 25 TCP Any Internet
100 SampleSSHRule 22 TCP Any Any
1 Network Interfaces
Name Public IP Addresses Private IP Addresses Virtual Machine
demo-2012r2-02772 10.0.0.4 DEMO-2012R2-02
1 Subnets
Name Address Range Virtual Network NAT Gateway

default 10.0.1.0/24 LinuxServers-vnet DEMO-2012R2-02-nsg
1 Locks
2 Role Assignments

Type
Reader

DEMO-2016-01-nsg
network.
General
Location
1000 default-allow-rdp 3389 TCP Any Any
demo-2016-01905 10.0.0.5 DEMO-2016-01
0 Subnets
There are no subnets found.
1 Locks

2 Role Assignments

Type
Reader

DEMO-LINUX01-nsg
network.
General
Location
1000 default-allow-ssh 22 TCP Any Any
demo-linux01297 10.0.1.4 DEMO-LINUX01
0 Subnets
There are no subnets found.
0 Locks

4 Role Assignments

Type
Reader

DEMO-SRV22-nsg
network.
General
Location
320 hs_test_ipr 8080 Any Any Any
310 Port_8080 8080 Any 10.2.1.1/32 Any

90 10.1.1.0/24
300 RDP 3389 TCP Any Any
demo-srv22467 10.1.0.4 DEMO-SRV22
1 Subnets
Name Address Range Virtual Network NAT Gateway
default 10.1.0.0/24 Server2022Test-vnet DEMO-SRV22-nsg

1 Locks
2 Role Assignments

Type
Reader

Proximity Placement Groups
A proximity placement group is a logical grouping used to make sure that Azure compute resources are
physically located close to each other.
1 Proximity Placement Group Resources
Example_Proximity_Placement_Group Contoso Azure Subscription West Europe

Example_Proximity_Placement_Group
A proximity placement group is a logical grouping used to make sure that Azure compute resources are
physically located close to each other.
General
Resource Type Proximity Placement Group
Location
1 Availability Sets
Name Fault Domains Update Domains SKU
CORP-AVAIL01 3 5 Classic (Unmanaged)
1 Virtual Machines
Name Size Operating System Generation
DEMO-2012R2-02 Standard_DS1_v2 Windows Server 2012 R2 V1

Datacenter
Virtual Machine Scale Sets
Virtual Machine Scale Set Names Example-Virtual-Machine-Scale-Set
1 Locks

2 Role Assignments

Type
Reader

Public IP Addresses
A public IP address enables Azure resources to communicate with Internet and public-facing Azure
services. The address is dedicated to the resource.
2 Public IP Address Resources
Name Subscription Name Location Address
DEMO-2016-02-ip Contoso Azure Subscription West Europe Dynamic
Example-Virtual-Machine-Scale-Set-ip Contoso Azure Subscription West Europe 52.142.206.179

DEMO-2016-02-ip
General
Resource Type Public IP Address
Location
Properties
Address Type IPv4
Assignment Type Dynamic
Domain Name Label
Fully Qualified Domain Name
Idle Timeout (minutes) 4
IP Address
SKU
SKU Tier Regional
SKU Type Basic
1 Locks

2 Role Assignments

Type
Reader

Example-Virtual-Machine-Scale-Set-ip
General
Resource Type Public IP Address
Location
Properties
Address Type IPv4
Assignment Type Static
Domain Name Label
Fully Qualified Domain Name
Idle Timeout (minutes) 4
IP Address 52.142.206.179
SKU
SKU Tier Regional
SKU Type Standard
1 Locks

2 Role Assignments

Type
Reader

Route Tables
Route tables determine how Azure routes traffic between Azure, on-premises, and Internet resources.
1 Route Table Resources
Name Subscription Name Location Routes
route-table Contoso Azure Subscription West Europe 1

route-table
Route tables determine how Azure routes traffic between Azure, on-premises, and Internet resources.
General
Resource Type Route Table
Location
General
Propagate Gateway Routes False
1 Routes
Name Address Prefix Next Hop Type Next Hop IP Address
route01 10.0.0.0/24 Virtual Appliance 10.0.1.1
1 Subnets
Name Address Range Virtual Network Network Security Group
default 10.0.0.0/24 WebServers-vnet
1 Locks

2 Role Assignments

Type
Reader

SQL Databases
An Azure SQL database is a fully managed platform as a service (PaaS) database based on the Microsoft
SQL Server database engine.
2 SQL Database Resources
Name Subscription Name Location SKU
test-azure-sql/test-azure-sql-db Contoso Azure Subscription Sweden Central Basic
test-azure-sql-2/test-azure-sql-db Contoso Azure Subscription Sweden Central Basic

test-azure-sql/test-azure-sql-db
General
Resource Type SQL Database
Resource Group Name DatabaseServers
Location
Location Display Name Sweden Central
General
Backup Storage Redundancy Type Locally-redundant backup storage
Collation Name SQL_Latin1_General_CP1_CI_AS
Database Identifier fa38ddb0-2e8f-43cd-9670-8b74af2571c6
Date Created 17 May 2022 09:11:56
Maximum Size 100 MB
Server Name test-azure-sql
Transparent Data Encryption Enabled True
SKU
Capacity 5 DTU
Edition Basic
Service Objective Name Basic
SKU Name Basic

Audit Policy
Auditing Enabled False
Elastic Pool
Elastic Pool Name test-azure-sql/test-azure-sql-elastic-pool
1 Replication Links
Partner Server Name Partner Location Role
test-azure-sql-2 Sweden Central Primary
0 Sync Groups
There are no sync groups found.
0 Locks
2 Role Assignments

Type
Reader

test-azure-sql-2/test-azure-sql-db
General
Resource Type SQL Database
Location
General
Backup Storage Redundancy Type Locally-redundant backup storage
Collation Name SQL_Latin1_General_CP1_CI_AS
Database Identifier e9875ca4-0347-471d-854f-8d8a7eff9ca7
Date Created 23 June 2022 11:03:28
Maximum Size 100 MB
Server Name test-azure-sql-2
Transparent Data Encryption Enabled True
SKU
Capacity 5 DTU
Edition Basic
Service Objective Name Basic
SKU Name Basic

Audit Policy
Elastic Pool
There are no SQL elastic pools found.
1 Replication Links
Partner Server Name Partner Location Role
test-azure-sql Sweden Central Secondary
1 Sync Groups
Name Automatic Sync Interval Conflict Resolution Policy
Sync-Group-Example Disabled Member Win
0 Locks
2 Role Assignments

Type
Reader

SQL Elastic Pools
Azure SQL database elastic pools allow for the managing and scaling of multiple databases that have
varying and unpredictable usage demands.
1 SQL Elastic Pool Resources
Name Subscription Name Location SKU
test-azure-sql/test-azure-sql-elastic-pool Contoso Azure Subscription West Europe Basic

test-azure-sql/test-azure-sql-elastic-pool
Azure SQL database elastic pools allow for the managing and scaling of multiple databases that have
varying and unpredictable usage demands.
General
Resource Type SQL Elastic Pool
Location
General
Elastic Pool Name test-azure-sql/test-azure-sql-elastic-pool
Maximum Capacity 8 DTU
Maximum Size 64 GB
Server Name test-azure-sql
Zone Redundant True
SKU
SKU Name Basic
Edition Basic
Capacity 4 DTU
1 Databases
Name Maximum Size Backup Storage Redundancy SKU

test-azure-sql/test-azure-sq 100 MB Locally-redundant backup Basic
l-db storage
0 Locks
2 Role Assignments

Type
Reader

SQL Servers
A SQL Server is a logical construct that acts as a central administrative point for a collection of Azure SQL
databases.
2 SQL Server Resources
Name Subscription Name Location Version
test-azure-sql Contoso Azure Subscription Sweden Central 12.0.0.0
test-azure-sql-2 Contoso Azure Subscription Sweden Central 12.0.0.0

test-azure-sql
databases.
General
Resource Type SQL Server
Location
General
Fully Qualified Domain Name test-azure-sql.database.windows.net
Server Version 12.0.0.0
Authentication Settings
Active Directory Administrator sysadmin@contoso.onmicrosoft.com
Require Azure Active Directory False

Authentication
SQL Administrator Login sysadmin
Audit Policy

Network
Deny Public Network Access False
Minimum TLS Version Not Specified
Connection Policy Default
Allow Access to Azure Services True
Outbound Network Access
Restrict Outbound Network Access False
1 Firewall Rules
Name Start IP Address End IP Address
ClientIPAddress_2022-5-17_10-6-26 212.159.103.19 212.159.103.19
1 Virtual Network Rules
Name Virtual Network
newVnetRule1 DatabaseServersVirtualNetwork (default)
Transparent Data Encryption
Key Type Service-Managed Key
1 Databases
test-azure-sql/test-azure-sql-db 100 MB Locally-redundant backup storage Basic
1 Failover Groups
Name Partner Server Name Replication Role Failover Policy Databases
examplefailovergroup test-azure-sql-2 Primary Automatic test-azure-sql-db
1 Private Endpoint Connections
Name
DatabasePrivateEndpoint-
8b30c2a9-3de0-45a0-ad5
c-475e0fcc7bdc
0 Locks

2 Role Assignments

Type
Reader

test-azure-sql-2
databases.
General
Resource Type SQL Server
Location
General
Fully Qualified Domain Name test-azure-sql-2.database.windows.net
Server Version 12.0.0.0
Active Directory Administrator GlobalReader@contoso.onmicrosoft.com
Require Azure Active Directory False

Authentication
SQL Administrator Login sysadmin
Audit Policy

Network
Deny Public Network Access False
Minimum TLS Version Not Specified
Connection Policy Default
Allow Access to Azure Services True
Outbound Network Access
Restrict Outbound Network Access False
1 Firewall Rules
Name Start IP Address End IP Address
ClientIPAddress_2022-6-28_10-6-26 212.159.103.20 212.159.103.20
1 Virtual Network Rules
Name Virtual Network
newVnetRule2 DatabaseServersVirtualNetwork (default)
Transparent Data Encryption
Key Type Service-Managed Key
1 Databases
test-azure-sql-2/test-azure-sql-db 100 MB Locally-redundant backup storage Basic
1 Failover Groups
Name Partner Server Name Replication Role Failover Policy Databases
examplefailovergroup test-azure-sql Secondary Automatic test-azure-sql-db
1 Private Endpoint Connections
Name
DatabasePrivateEndpoint-
8b30c2a9-3de0-45a0-ad5
c-475e0fcc7bdc
0 Locks

2 Role Assignments

Type
Reader

Storage Accounts
An Azure storage account contains Azure Storage data objects, including blobs, file shares, queues,
tables, and disks. The storage account provides a unique namespace to the Azure Storage data that's
accessible from anywhere in the world over HTTP or HTTPS.
3 Storage Account Resources
blockblobstorageaccount1 Contoso Azure Subscription UK South Premium Locally Redundant Storage (LRS)
filesharestorageaccount4 Contoso Azure Subscription UK South Premium Locally Redundant Storage (LRS)
webserversdiag180 Contoso Azure Subscription West Europe Standard Locally Redundant Storage (LRS)

blockblobstorageaccount1
General
Resource Type Storage Account
Location
General
Account Kind Block Blob Storage
Status of Primary Available
SKU
Performance Tier Premium
SKU Type Premium Locally Redundant Storage (LRS)

Blob Service
Enable Hierarchical Namespace False
Allow Blob Public Access True
Blob Soft Delete Enabled (7 Days)
Container Soft Delete Enabled (7 Days)
Custom Domain
Encyption Enabled True
Versioning Enabled False
Change Feed Retention Disabled
NFS v3 Enabled False
0 Containers
There are no containers found.
Primary Endpoints
Blob https://blockblobstorageaccount1.blob.core.windows.net/
DFS https://blockblobstorageaccount1.dfs.core.windows.net/
File
Queue
Table
Web https://blockblobstorageaccount1.z33.web.core.windows.net/
1 Access Keys
Name Date Value

Created
key1 28 June 1234567890hLQGRZpySe12345rpua+UAcvqlzDqomVy4HtINKJ22vSgBc/wVD12345r5GqQCTbAS+A1234567890

2022
12:23:14
1 Locks
2 Role Assignments

Type
Reader

filesharestorageaccount4
General
Location
General
Account Kind File Storage
SKU
Performance Tier Premium
SKU Type Premium Locally Redundant Storage (LRS)

Primary Endpoints
Blob
DFS
File https://filesharestorageaccount4.file.core.windows.net/
Queue
Table
Web
1 Access Keys
Name Date Value

Created

2022
12:23:29
1 Locks
2 Role Assignments

Type
Reader

webserversdiag180
General
Location
General
Account Kind Storage
Date Created 17 December 2016 16:05:58
SKU
Performance Tier Standard
SKU Type Standard Locally Redundant Storage (LRS)

Blob Service
Enable Hierarchical Namespace False
Allow Blob Public Access True
Blob Soft Delete Disabled
Container Soft Delete Disabled
Custom Domain
Encyption Enabled True
Versioning Enabled False
Change Feed Retention Disabled
NFS v3 Enabled False
6 Containers
Name Date Last Lease Public Access Type

Modified State
bootdiagnostics-demo2012r-cc9fdd1f-a561-4d54-a5bc-89ba1fa1ae13 14 March Available Private (no anonymous access)

2022
16:13:31
bootdiagnostics-demo20160-b535bd83-eb82-4e81-8181-48991a63bc38 26 Available Private (no anonymous access)

January
2017
09:50:07
bootdiagnostics-demo20160-f10d9460-ac6d-4002-bd4b-9ab7797562e2 03 Available Private (no anonymous access)

January
2017
15:38:59
bootdiagnostics-demo2016c-d72fcb66-3a37-4ee8-9960-32cb57a8051b 26 Available Private (no anonymous access)

January
2017
11:24:43
bootdiagnostics-demolinux-db504edd-1d67-4e5f-bfc2-deca16a5f71f 03 Available Private (no anonymous access)

January
2017
15:31:48
vhds 26 Leased Private (no anonymous access)

January
2017
09:50:07
Primary Endpoints
Blob https://webserversdiag180.blob.core.windows.net/
DFS
File https://webserversdiag180.file.core.windows.net/
Queue https://webserversdiag180.queue.core.windows.net/
Table https://webserversdiag180.table.core.windows.net/
Web
1 Access Keys
Name Date Value

Created

2022
12:23:44
1 Locks
2 Role Assignments

Type
Reader

Virtual Machines
An Azure virtual machine (VM) is an on-demand, scalable computing resource.
4 Virtual Machine Resources
Name Subscription Name Location Operating Size

System Type
DEMO-2012R2-02 Contoso Azure Subscription West Europe Windows Standard_DS1_v2
DEMO-2016-01 Contoso Azure Subscription West Europe Windows Standard_DS1_v2
DEMO-LINUX01 Contoso Azure Subscription West Europe Linux Standard_EC96iads_v5
DEMO-SRV22 Contoso Azure Subscription UK South Windows Standard_L32s

DEMO-2012R2-02
General
Resource Type Virtual Machine
Location
System
Admin Username support
Agent Version 2.7.41491.1057
Computer Name DEMO-2012R2-02
Generation V1
Virtual Machine Identifier cc9fdd1f-a561-4d54-a5bc-89ba1fa1ae13
Operating System
Operating System Name Windows Server 2012 R2 Datacenter
Operating System Version Microsoft Windows NT 6.3.9600.0
Power State
Power State Running

Boot Diagnostics
Enabled True
Status Enabled with custom storage account
Storage URI https://webserversdiag180.blob.core.windows.net/
Availability Set
Availability Set Name CORP-AVAIL01
Name Public IP Addresses Private IP Addresses Network Security Group
demo-2012r2-02772 10.0.0.4 DEMO-2012R2-02-nsg
3 Extensions
Name Publisher Automatic Upgrade Enabled Provisioning State
AcronisBackup v1.0 Acronis.Backup Not Supported Failed
AzureDiskEncryption v2.2 Microsoft.Azure.Security Not Supported Failed
enablevmaccess v2.0 Microsoft.Compute Not Supported Succeeded
Sizing
Name Standard_DS1_v2
Maximum Data Disk Count 4
Memory Size 3.5 GB
Number of Cores 1
Operating System Disk Size 1,023 GB
Resource Disk Size 7 GB
1 Locks
2 Role Assignments

Type
Reader

Storage
Provides information about the storage configuration for the virtual machine.
2 Disks
Name Purpose Type Size Encryption
DEMO-2012R2-02 Operating System Unmanaged 127 GB Not Encrypted
DEMO-2012R2-02-20180523-173419 Data Disk Unmanaged 1 GB Not Encrypted

DEMO-2012R2-02
Provides information about the virtual machine operating system disk.
Properties
Host Caching Read/Write
Disk Size 127 GB
Disk Type Unmanaged
Operating System
VHD
VHD Location https://webserversdisks769.blob.core.windows.net/vhds/DEMO-2012R2-02201612171605 48.vhd
Encryption
Encryption State Not Encrypted

DEMO-2012R2-02-20180523-173419
Provides information about the virtual machine data disk.
Properties
Host Caching None
Disk Size 1 GB
Disk Type Unmanaged
LUN 0
VHD
VHD Location https://webserversdiag180.blob.core.windows.net/vhds/DEMO-2012R2-02-20180523-173 419.vhd
Encryption

DEMO-2016-01
General
Location
System
Admin Username adminuser
Agent Version Unknown
Computer Name DEMO-2016-01
Generation V1
Virtual Machine Identifier f10d9460-ac6d-4002-bd4b-9ab7797562e2
Operating System
Operating System Name
Operating System Version
Power State
Power State Running

Boot Diagnostics
Enabled True
Availability Set
No Availability Set
demo-2016-01905 10.0.0.5 DEMO-2016-01-nsg
0 Extensions
There are no extensions found.
Sizing
Name Standard_DS1_v2
Memory Size 3.5 GB
Number of Cores 1
Resource Disk Size 7 GB
1 Locks
2 Role Assignments

Type
Reader

Storage
1 Disks
DEMO-2016-01_7581e04ddecd48f6a2d21454dce72e6c Operating Managed 8 (Default) Encryption at-rest with a

System GB platform-managed key

DEMO-2016-01_7581e04ddecd48f6a2d21454dce72e6c
Properties
Disk Size 8 GB
Disk Type Managed
SKU
Tier P2
Disk Size 8 GB
Operating System
Encryption
Encryption State (Default) Encryption at-rest with a platform-managed key

DEMO-LINUX01
General
Location
System
Admin Username adminuser
Agent Version WALinuxAgent-2.0.16
Computer Name DEMO-LINUX01
Generation V1
Virtual Machine Identifier db504edd-1d67-4e5f-bfc2-deca16a5f71f
Operating System
Operating System Type Linux
Operating System Name
Operating System Version
Power State
Power State Running

Boot Diagnostics
Enabled True
Availability Set
No Availability Set
demo-linux01297 10.0.1.4 DEMO-LINUX01-nsg
0 Extensions
There are no extensions found.
Sizing
Name Standard_EC96iads_v5
Memory Size 672 GB
Number of Cores 96
Resource Disk Size 2.34 TB
0 Locks
4 Role Assignments

Type
Reader

Storage
1 Disks
DEMO-LINUX01 Operating System Unmanaged 0 bytes Not Encrypted

DEMO-LINUX01
Properties
Disk Size 0 bytes
Disk Type Unmanaged
Operating System
Operating System Type Linux
VHD
VHD Location https://webserversdisks769.blob.core.windows.net/vhds/DEMO-LINUX0120170103153129 .vhd
Encryption

DEMO-SRV22
General
Location
System
Admin Username sysadmin
Agent Version 2.7.41491.1057
Computer Name DEMO-SRV22
Generation V2
Virtual Machine Identifier 0143a187-47b4-49ee-867c-075fdb2da211
Operating System
Operating System Name Windows Server 2022 Datacenter
Operating System Version 10.0.20348.587
Power State
Power State Running

Boot Diagnostics
Enabled True
Status Enabled with managed storage account
Availability Set
No Availability Set
demo-srv22467 10.1.0.4 DEMO-SRV22-nsg
1 Extensions
Name Publisher Automatic Upgrade Enabled Provisioning State
AzureDiskEncryption v2.2 Microsoft.Azure.Security Not Supported Failed
Sizing
Name Standard_L32s
Memory Size 256 GB
Number of Cores 32
Resource Disk Size 5.5 TB
1 Locks
3 Role Assignments

Type
xia@contoso.onmicrosoft.com User Virtual Machine Contributor This Resource
Reader

Storage
1 Disks
DEMO-SRV22_OsDisk_1_d8b534b7e036400d88eba657b11240bf Operating Managed 30 (Default) Encryption at-rest with

System GB a platform-managed key

DEMO-SRV22_OsDisk_1_d8b534b7e036400d88eba657b11240bf
Properties
Disk Size 30 GB
Disk Type Managed
SKU
Tier
Disk Size 30 GB
Operating System
Encryption
Encryption State (Default) Encryption at-rest with a platform-managed key

Virtual Networks
A virtual network enables many types of Azure resources, such as Azure virtual machines, to securely
communicate with each other, the internet, and on-premises networks.
4 Virtual Network Resources
Name Subscription Name Location Address Prefixes
LinuxServers-vnet Contoso Azure Subscription West Europe 10.0.1.0/24
Server2022Test-vnet Contoso Azure Subscription UK South 10.1.0.0/16
WebServers-vnet Contoso Azure Subscription West Europe 10.0.0.0/24
WebServersvnet328 Contoso Azure Subscription West Europe 10.2.0.0/16

LinuxServers-vnet
General
Resource Type Virtual Network
Location
General
Address Prefixes 10.0.1.0/24
BGP Regional Community
BGP Virtual Network Community
Flow Timeout Disabled
DDoS Protection Settings
DDoS Protection Enabled False
DNS Settings
DNS Servers Default (Azure-provided)
1 Subnets
Name Address Prefixes NAT Gateway Network Security Route Table

Group
default 10.0.1.0/24 DEMO-2012R2-02-nsg

0 Peerings
There are no peerings found.
0 Locks
4 Role Assignments

Type
Reader

Server2022Test-vnet
General
Location
General
DNS Settings
1 Subnets

Group
default 10.1.0.0/24 DEMO-SRV22-nsg

0 Peerings
There are no peerings found.
1 Locks
2 Role Assignments

Type
Reader

WebServers-vnet
General
Location
General
DNS Settings
1 Subnets

Group
default 10.0.0.0/24 route-table

1 Peerings
Name State Peer Use Remote Gateways
example-peering-link Connected WebServersvnet328 False
1 Locks
2 Role Assignments

Type
Reader

WebServersvnet328
General
Location
General
DNS Settings
1 Subnets
Name Address Prefixes NAT Gateway Network Security Group Route Table
default 10.2.0.0/16

1 Peerings
Name State Peer Use Remote Gateways
remote-peering-link Connected WebServers-vnet False
1 Locks
2 Role Assignments

Type
Reader

Web Apps
An Azure web app is an HTTP-based service for hosting web applications.
1 Web App Resources
Name Subscription Name Location App Service Plan
demo-web-app-02 Contoso Azure Subscription UK South app-service-plan-02

demo-web-app-02
An Azure web app is an HTTP-based service for hosting web applications.
General
Resource Type Web App
Location
Site Configuration
Always On False
ARR Affinity True
Custom Domain Verification Identifier 0A2F9DA0D02C09787D6394630A490F54DD33F8FD23349908C5183A3B8E022854
Default Hostname demo-web-app-02.azurewebsites.net
Host Names demo-web-app-02.azurewebsites.net
HTTP 2.0 Enabled False
MySQL In App Enabled False
Managed Pipeline Mode Integrated
Minimum TLS Version TLS 1.0
Outbound IP Addresses 51.140.191.169

51.140.191.238
51.140.191.194
51.140.191.232
Require HTTPS Connections False
Web Sockets Enabled False

Client Certificates
Client Certificate Mode Ignore
Default Documents
Default Documents Default.htm

Default.html
Default.asp
index.htm
index.html
iisstart.htm
default.aspx
index.php
hostingstart.html
Remote Debugging
Remote Debugging Enabled False
Remote Debugging Version
.NET
.NET Version v4.0
Development Stack
PHP Version 5.6
Java Version
Java Web Server
App Service Plan
App Service Plan Name app-service-plan-02
SKU Tier Free
SKU Name F1
SKU Capacity 0
Deployment Slots
Deployment Slot Names
Enabled True
Require Authentication True
Unauthenticated Client Action Redirect to login page
Token Store Enabled True
Token Refresh Extension (Hours) 1
Default Provider Name
Allowed External Redirect URLs

Apple Identity Provider
The identity provider is not configured.
Microsoft Identity Provider
Application (Client) Identifier bde2e27d-1f21-4c17-8e3a-7dd02216015b
Client Secret Setting Name MICROSOFT_PROVIDER_AUTHENTICATION_SECRET
Issuer URL https://sts.windows.net/89171ce4-bd14-4b51-831d-2bbc55e9ee3a/v2.0
Allowed Audiences api://bde2e27d-1f21-4c17-8e3a-7dd02216015b
Facebook Identity Provider
GitHub Identity Provider
Google Identity Provider
Twitter Identity Provider
FTP Publishing Settings
FTP Access FTP/FTPS Enabled
FTPS Endpoint ftps://waws-prod-ln1-001.ftp.azurewebsites.windows.net/site/wwwroot
Username demo-web-app-02\$demo-web-app-02
1 Application Settings
Name Value
WEBSITE_NODE_DEFAULT_VERSION 6.9.1
1 Locks

3 Role Assignments

Type
xia@contoso.onmicrosoft.com User Website Contributor This Resource
Reader

Other Resource Types
Other resources include any resource type that is not explicitly scanned by the system.
Only basic resource information is available for these resource types.
17 Other Resources
Name Subscription Name Resource Type
c9portalvhdst1y6dds8f24r Contoso Azure Subscription Microsoft.ClassicStorage/storageAccounts
DEMO-2K12R2-CLA Contoso Azure Subscription Microsoft.ClassicCompute/domainNames
demo-web-app-01 Contoso Azure Subscription microsoft.insights/components
Example_Load_Balancer Contoso Azure Subscription Microsoft.Network/loadBalancers
Example-Virtual-Machine-Scale-Set Contoso Azure Subscription Microsoft.Compute/virtualMachineScaleSets
Example-Virtual-Machine-Scale-Set Contoso Azure Subscription Microsoft.Network/loadBalancers

-lb
NetworkWatcher_eastus Contoso Azure Subscription Microsoft.Network/networkWatchers
NetworkWatcher_uksouth Contoso Azure Subscription Microsoft.Network/networkWatchers
NetworkWatcher_westeurope Contoso Azure Subscription Microsoft.Network/networkWatchers
privatelink.blob.core.windows.net Contoso Azure Subscription Microsoft.Network/privateDnsZones
privatelink.database.windows.net Contoso Azure Subscription Microsoft.Network/privateDnsZones
SRV22KeyVaultTest Contoso Azure Subscription Microsoft.KeyVault/vaults
SuperManagedUser Contoso Azure Subscription Microsoft.ManagedIdentity/userAssignedIdentit

ies
TestDiskAccess Contoso Azure Subscription Microsoft.Compute/diskAccesses
TestDiskAccessEndpoint Contoso Azure Subscription Microsoft.Network/privateEndpoints
TestDiskEncryptionSet Contoso Azure Subscription Microsoft.Compute/diskEncryptionSets
Virtual_key Contoso Azure Subscription Microsoft.Compute/sshPublicKeys

Version History
The version history displays the changes that have been made to the documentation of this item over
time - either automatically when a change has been detected, or manually by users of the system.
4 versions
Version Username Date Time Description
1.03 W-2K22\sysadmin 06 July 2022 10:30 Added item description and primary owner.
1.02 W-2K22\sysadmin 29 June 2022 16:54 Updated by XIA Configuration Client Data
1.01 W-2K22\sysadmin 29 June 2022 10:51 Updated by XIA Configuration Client Data
1.00 W-2K22\sysadmin 28 June 2022 16:17 Created by XIA Configuration Client

Microsoftazure

Uploaded by

Document Information

Original Title

Copyright

Available Formats

Share this document

Share or Embed Document

Sharing Options

Did you find this document useful?

Is this content inappropriate?

Copyright:

Available Formats

Microsoftazure

Uploaded by

Copyright:

Available Formats

Azure Tenant Documentation

Contoso Technical Services

Date 06 July 2022 10:31:41

Product XIA Configuration Server [14.0.19.0]

Azure Tenant Information 7

Azure Active Directory 16

XIA Automation Server 18

XIA Configuration Server 19

Contoso Technical Services 23

Example Distribution Group 25

Microsoft 365 Group 26

SQL Azure Active Directory Administrators 28

Contoso Azure Subscription 33

Server Alert Rule 36

Audit virtual machines without disaster recovery configured 40

IRS1075 September 2016 41

App Service Plans 60

Classic Virtual Machines 66

Network Security Groups 90

Proximity Placement Groups 99

Public IP Addresses 102

Route Tables 107

SQL Databases 110

SQL Elastic Pools 115

SQL Servers 118

Storage Accounts 125

Virtual Machines 133

Virtual Networks 151

Web Apps 160

Other Resource Types 165

Version History 166

Page 6 of 166 Contoso Technical Services

Name Contoso Technical Services

Description This is a sample Azure item.

Primary Owner Name System Administrator

Primary Owner Contact sysadmin@contoso.com

Item Path Contoso Technical Services

Check Out Status Available

Page 7 of 166 Contoso Technical Services

Primary Identifier contoso.onmicrosoft.com

Secondary Identifier 6c80f4a4-ba63-44bf-8cde-523cb3d3d06b

Client Machine Name W-2K22

Client Identifier 5697298f-8c8d-41f8-b8bb-2e762b11ab6f

Client IP Address 192.168.131.213

Client Scan Date 28 June 2022 10:55 (8 days ago)

Client Service Username W-2K22\sysadmin

Client Version 14.0.19.0

Target Service Principal: 2fabc88c-c58c-497d-984a-7c3586f89d14

Profile Name Scan Azure

Profile Identifier b76b7ce4-7396-4be9-b70a-1b80125a63f8

Page 8 of 166 Contoso Technical Services

Item ID Direction Name Type Relationship Type

1000 Outbound Contoso Technical Services Container Contained Within

1014 Outbound test-azure-sql.database.windows.net SQL Instance Hosts Azure SQL Database

1024 Outbound test-azure-sql-2.database.windows.net SQL Instance Hosts Azure SQL Database

Page 9 of 166 Contoso Technical Services

Page 10 of 166 Contoso Technical Services

Name Contoso Technical Services

Tenant Identifier 89171ce4-bd14-4b51-831d-2bbc55e9ee3a

Default Domain contoso.onmicrosoft.com

Creation Date 22 September 2016 12:57:37

Business Phone Numbers 44(0)1234123456

Preferred Language English