Customer Responsibility: Security in the Cloud

Customers are responsible for the deployment and ongoing configuration of their SDDC, virtual machines, and data that reside therein.

In addition to determining the network firewall, ExpressRoute and VPN configuration, customers are responsible for managing virtual machines (including in guest security and encryption) and using Azure role-based access control (or Azure Active Directory) along with vCenter Roles and Permissions to apply the appropriate controls for users.