Azure portal URL safelist
Microsoft's edit ·
Microsoft's commit message in MicrosoftDocs/azure-management-docs · commit 0a3e89a · +2 −1 lines · also on GitHub
⋯ 27 unchanged lines
2828
### [Public Cloud](#tab/public-cloud)
2929
3030
> [!TIP]
31
−> The service tags required to access the Azure portal (including authentication and resource listing) are **AzureActiveDirectory**, **AzureResourceManager**, **AzureFrontDoor.Frontend**, and **AzureFrontDoor.FirstParty**. Access to other services may require additional permissions, as described below.
31
+> The service tags required to access the Azure portal (including authentication and resource listing) are **AzureActiveDirectory**, **AzureResourceManager**, and **AzureFrontDoor.Frontend**. Access to other services may require additional permissions, as described below.
3232
> However, there is a possibility that unnecessary communication other than communication to access the portal may also be allowed. If granular control is required, FQDN-based access control such as Azure Firewall is required.
3333
3434
#### Azure portal authentication
⋯ 20 unchanged lines
5555
*.ext.azure.com
5656
*.graph.windows.net
5757
*.graph.microsoft.com
58
+hosting.partners.azure.net
5859
```
5960
6061
#### Account data
⋯ 112 unchanged lines
Microsoft's Markdown source from MicrosoftDocs/azure-management-docs, © Microsoft Corporation, under CC BY 4.0. Changed lines with up to 3 unchanged lines around each; ChangeIntel kept this copy 10 Oct 08:53 UTC. The commit date is when the source changed, which can be hours or days before Learn published it.