How to configure "Europe Access Only" for resources in Azure Subscription

Question

Our objective is to restrict access to resources within our Azure subscription to ensure that personal data remains inaccessible to operators and end-users located outside the EEA (European Economic Area) or Switzerland. Could you please share any clear guidelines or best practices that could aid in achieving this?

Answer 1

Hello Bob , Welcome to MS Q&A

To configure access for resources in an Azure subscription to allow only European access, you can create a Conditional Access policy in Microsoft Entra ID. Here are the steps to do this:

1. Sign in to the Microsoft Entra admin center as a Conditional Access Administrator.
2. Navigate to Protection > Conditional Access > Policies.
3. Select New policy and give your policy a meaningful name.
4. Under Assignments, select Users or workload identities. Include all users but exclude emergency access accounts.
5. Under Target resources, select All resources.
6. Under Network, set Configure to Yes and select the blocked location you created for Europe.
7. Under Access controls, select Block Access.
8. Confirm your settings and initially set the policy to Report-only mode for testing.
9. Once confirmed, enable the policy.

This will restrict access to only users connecting from the specified European locations.

References:

• Plan a Conditional Access deployment
• Block access by location

Please accept if it answers your query

Kindly let us know if any further questions

Thanks
Deepanshu