Event banner
Microsoft Government CMMC AMA
Event Ended
Tuesday, Apr 12, 2022, 10:30 AM PDTEvent details
We want to hear from our customers and answer their questions around how we can help them achieve CMMC compliance with your Microsoft Azure and Microsoft 365 subscriptions. We will be hosting an "Ask...
Sarah_Gilbert
Updated Apr 12, 2022
NCJayG
Apr 11, 2022Copper Contributor
Many of us in HigherEd are grappling with the idea that we only need a small Azure or 365 tenant for compliant use, and that many of our users would only need to be there temporarily, but it would appear that it's not at all easy to move users in and out on an as needed basis. It is not desirable from either a cost basis, or usability standpoint to move everything into FedRAMP offerings. So, what does Microsoft suggest as the right path forward?
RichardWakeman
Microsoft
Apr 12, 2022Howdy Jay. This is a common concern many grapple with. Many FFRDC's & UARC's must swivel seat with the University accounts. We recommend you find a solid line of demarcation for the user population affiliated with the research center and give them accounts in GCC/GCCH. It's essentially lifting the watermark for compliance on the entire research center, swivel seating with the University accounts. Interestingly enough, it's "going all in" for the research center, but in context of the specific user population. That includes having the user devices managed from GCC/GCCH as opposed to Commercial. We recommend you setup a separate pane of glass (e.g. VDI) to access the commercial side Uni account. I rationalize this here: https://aka.ms/AA6frar. Any customers we see try and move users in and out of GCC/GCCH tend to gravitate towards what I describe.
- NCJayGApr 12, 2022Copper ContributorUnfortunately for many of us that would mean moving in our entire graduate student population, and that's simply not feasible.