In Global Secure Access, a container for filtering policies (web content filtering among them) ordered by priority. To take effect it must be linked to a Conditional Access policy, or set as the baseline profile for the whole tenant.
Read more: Microsoft Learn
In the Ultra Transcenders books
Each book explains Security profile in context, with comparison tables and the common traps.
Terms in this definition
- Global Secure Access
Brand covering Microsoft's SSE (Security Service Edge) products, namely Internet Access and Private Access from Entra, which are set up through the Microsoft Entra admin center.
- Container
Something that groups data. Blob Storage containers sit inside a storage account and hold blobs much as folders hold files; Cosmos DB containers hold items and set the scope for partitioning and throughput.
- Priority
Routing method in Traffic Manager for active/passive failover: traffic goes to whichever healthy endpoint has the highest priority.
- Conditional Access
Policy engine in Microsoft Entra ID P1 that, depending on signals such as risk or named locations, allows access subject to controls like MFA or a compliant device, or blocks it.
- Exclusions
Scopes taken out of a policy assignment; they can only narrow its coverage, never widen it.
- Set
Secret permission in Key Vault for writing secrets; some older material refers to it as Create.
- Baseline profile
Applies to every bit of Internet Access traffic, remote networks included, without needing a Conditional Access policy, and it still runs even if another profile matches first. This Global Secure Access security profile has priority 65000, the lowest available.
- Tenant
A trusted, dedicated Microsoft Entra ID instance that stores the users, groups and app registrations of one organisation. A subscription trusts only a single tenant, although a tenant can be trusted by several subscriptions.
Related terms
- Defender sensor
DaemonSet from Defender for Containers that runs on each node and gathers runtime telemetry with eBPF for threat detection. AKS gets it as a security profile; EKS and GKE get it as an Arc extension.
- Web content filtering policy
Allows or blocks URLs, FQDNs or web categories in Global Secure Access, but does nothing until a security profile includes it. The V2 model calls it web filtering.