GR 3 | Validation 1 | Admin Access Restrictions Applied – Device Management/ Trusted Locations (M)

[MathesonSho]

ItemName: Admin Access Restrictions Applied – Device Management/ Trusted Locations (M) ItemName FR: Restrictions d'accès administrateur appliquées – Gestion des appareils/Emplacements approuvés (M)

Description: This is a new control that will evaluate the environment’s conditional access policies. One of the environments CAPs will need to relate to named/ trusted locations. The other relating to device-based Conditional Access management (Target Resource and a condition for the device logging in). Both policies must include administrative users..

• “Is there a policy that uses any kind of device filter?” if yes, compliant.
• “Is there a policy that looks for a named/ trusted location?” if yes, compliant.
• "Do these policies include administrative users?" if yes, compliant.

[dutt0]

@alalvi00 Guardrail directory name and the other associated code needs to be renamed to match with Government of Canada Cloud Guardrails- Canada.ca