Topic

Backup access

Applicable to

all

History

Sep 2024

Unprivileged user accounts cannot access backups belonging to other accounts.

References to ‘unprivileged accounts’ were changed to ‘unprivileged user accounts’ in order to more closely match Microsoft Active Directory account types (i.e. ‘users’ and ‘computers’). Note, the definition of unprivileged accounts (which referred to such accounts as being a combination of unprivileged user accounts and unprivileged service accounts) has been removed. Unprivileged service accounts are now treated as a subset of unprivileged user accounts.

Sep 2024

Unprivileged user accounts cannot access backups belonging to other accounts.

References to ‘unprivileged accounts’ were changed to ‘unprivileged user accounts’ in order to more closely match Microsoft Active Directory account types (i.e. ‘users’ and ‘computers’). Note, the definition of unprivileged accounts (which referred to such accounts as being a combination of unprivileged user accounts and unprivileged service accounts) has been removed. Unprivileged service accounts are now treated as a subset of unprivileged user accounts.

Dec 2022

Unprivileged accounts cannot access backups belonging to other accounts.

Backup access language associated with existing controls was amended to provide clarity of intent [ISM-1705, ISM-1706]. This included the introduction of two new controls [ISM-1812, ISM-1813].