Batch accounts should have an identity provider enabled
Checks that a managed identity provider is enabled for each Azure Batch account. A batch account is reported as non-compliant when its `identity` provider is disabled, and it is reported as compliant when the provider is enabled.
What this control checks
Batch account must have an identity provider enabled
Common pitfalls
Only type None is non-compliant
The check returns alarm when identity ->> 'type' is None. Any other value returns ok.
Audit evidence
Evidence that deployed resources meet this control: PowerPipe control azure_compliance.control.batch_account_identity_provider_enabled.
Related controls
Tool mappings
Use these identifiers to cross-reference this control across tools, reports, and evidence.
- Compliance.tf Control:
batch_account_identity_provider_enabled - Powerpipe Control:
azure_compliance.control.batch_account_identity_provider_enabled
Last reviewed: 2026-10-11