Microsoft Entra Private Access

azure Bastion hostazure-entra-private-access

Brokered access to private applications through a network connector and the Global Secure Access client instead of a VPN.

Provider: azure
Kind: Bastion host
Category: Security
Official docs: https://learn.microsoft.com/en-us/entra/global-secure-access/concept-private-access
Also known as: Global Secure Access

Properties · 1 set by this component

property	type	values	required	kind default	this component
accessModel · component property	enum	quick-access \| per-app	no	—	inherited
clientRequired · component property	boolean	—	no	true	inherited
connectorRequired · component property	boolean	—	no	true	inherited
justInTimeAccess	boolean	—	no	false	inherited
managed	boolean	—	no	false	▸ true
mfaRequired	boolean	—	no	—	inherited
protocols	enum	ssh \| rdp \| both	no	—	inherited
publicIp	boolean	—	no	—	inherited
sessionRecording	boolean	—	no	—	inherited

Rules that apply · 0

Every rule whose selector covers this component's kind or its category. Whether a rule fires depends on the design: its properties, its edges and its groups.

No rule reads this kind yet. That is a gap, not a guarantee.

Use it in a design

nodes:
  - { id: "entra-private-access", component: "azure-entra-private-access" }

Other Bastion host products · 17

Bastionhostalibaba-bastionhostalibabacloudbastion-host EC2 Instance Connect Endpointaws-ec2-instance-connect-endpointawsbastion-host AWS Systems Manager Session Manageraws-ssm-session-managerawsbastion-host AWS Verified Accessaws-verified-accessawsbastion-host Azure Bastionazure-bastionazurebastion-host Cloudflare Accesscloudflare-accesscloudflarebastion-host Cloudflare One RDPcloudflare-rdpcloudflarebastion-host Generic bastion hostbastion-hostbastion-host HashiCorp Boundaryboundarybastion-host ContainerSSHcontainersshbastion-host Paralusparalusbastion-host Pomeriumpomeriumbastion-host OpenSSH jump hostssh-jump-hostbastion-host Teleportteleportbastion-host Chrome Enterprise Premiumgoogle-chrome-enterprise-premiumgcpbastion-host Identity-Aware Proxygoogle-identity-aware-proxygcpbastion-host Bastionoci-bastionocibastion-host

Source

1# yaml-language-server: $schema=../../schema/component.schema.json
2# Microsoft Entra Private Access: brokered access to private FQDNs and IP ranges that replaces a VPN
3# ("Learn about Microsoft Entra Private Access"). That page states users reach resources through the Global
4# Secure Access Client, that each Quick Access or Global Secure Access app has its own Microsoft Entra
5# private network connector brokering the connection to the internal resource, and that Conditional Access
6# policies control access to the app.
7schemaVersion: "1"
8type: "component"
9id: "azure-entra-private-access"
10kind: "bastion-host"
11provider: "azure"
12docs: "https://learn.microsoft.com/en-us/entra/global-secure-access/concept-private-access"
13aliases: ["Global Secure Access"]
14defaults:
15  managed: true
16properties:
17  accessModel:
18    type: "enum"
19    values: ["quick-access", "per-app"]
20  connectorRequired:
21    type: "boolean"
22    default: true
23  clientRequired:
24    type: "boolean"
25    default: true

The same page as markdown, for an agent: /catalogue/components/azure-entra-private-access.md