---
title: '''Trusted Microsoft Services'' should be enabled for Storage Account access'
description: Datadog, the leading service for cloud-scale monitoring.
breadcrumbs: >-
  Docs > Datadog Security > OOTB Rules > 'Trusted Microsoft Services' should be
  enabled for Storage Account access
---

> For the complete documentation index, see [llms.txt](https://docs.datadoghq.com/llms.txt).

# 'Trusted Microsoft Services' should be enabled for Storage Account access
 
## Description{% #description %}

Enabling firewall rules for a storage account restricts incoming data requests, including those from other Azure services, such as using the portal or writing logs. However, by enabling Trusted Microsoft Services through exceptions, you can regain access to services like Monitor, Networking, Hubs, and Event Grid. Additionally, this exception allows for backing up and restoring virtual machines using unmanaged disks in storage accounts with network rules applied. To ensure smooth operation of these services, it is recommended to enable the exception for Trusted Microsoft Services.

This rule skips storage accounts whose default network access rule is set to Allow or whose public network access is set to Disabled. The Trusted Microsoft Services exception only takes effect when the firewall restricts access to selected virtual networks and IP addresses. On those accounts, the exception has no effect.

## Remediation{% #remediation %}

### From the console{% #from-the-console %}

1. Go to **Storage Accounts**
1. For each storage account, click on the **settings** menu called **Firewalls and Virtual Networks**.
1. Ensure that **Allow access from selected networks** is `enabled`.
1. Enable **Allow trusted Microsoft services to access this storage account**.
1. Click **Save** to apply your changes.