TMA-POWERPLATFORM-4.1
Ensure 'System Administrator security role changes are reviewed periodically'
Beschreibung
Security roles define how different users access different types of records. To control access to data, security roles can be modified to create new security roles or change which security roles are assigned to each user. Each user can have multiple security roles and are cumulative meaning having more than one security role gives a user every privilege available in every role. Illicit role group changes could give an attacker access to data that is privileged and perform tasks in the environment.
So wird geprüft
Prüfmethode: Manuelle Prüfung
Diese Empfehlung kann nicht automatisch geprüft werden. Ein Scan führt sie mit diesen Anweisungen auf, wenn Sie --include-manual übergeben.
Verify which users have been added to the System Administrator Security Role. In the Power Platform Admin Center: 1. Log in to https://admin.powerplatform.microsoft.com and select the appropriate environment. 2. Select Edit on the Details pane of the environment. 3. Select Settings at the top of the window. 4. Expand Users + permissions then select Security roles. 5. Click on System Administrator (not the three dots and edit) 6. Review the list of users
So wird behoben
Behebungsmethode: Anleitung oder Infrastruktur-Patch
Ensure no unauthorized users have been added to the System Administrator Security Role. In the Power Platform Admin Center: 1. Log in to https://admin.powerplatform.microsoft.com and select the appropriate environment. 2. Select Edit on the Details pane of the environment. 3. Select Settings at the top of the window. 4. Expand Users + permissions then select Security roles. 5. Click on System Administrator (not the three dots and edit) 6. Add/Remove users as appropriate.
Eigenschaften
- Betriebssysteme
- Beliebig
- Tags
- iampower-platformsaas
- Referenz
- CIS Microsoft Dynamics 365 Power Platform Benchmark v1.0.1 - 4.1 Ensure 'System Administrator security role changes are reviewed periodically'