Microsoft Power Platform
TMA-POWERPLATFORM-3.2
Ensure 'Extract customer data privileges from Microsoft Dynamics 365 is controlled'
Description
Ensure that privileges related to customer data extraction are well tailored for the business needs considering the minimum privileges required. When users are able to export data deliberately, data governance and security can become an impossible activity and can also lead data leakage.
How it is checked
Audit method: Manual review
Ensure that the extract customer data privileges from Microsoft Dynamics 365 controlled. In the Power Platform Admin Center:** 1. Log in to https://admin.powerplatform.microsoft.com and select the appropriate environment. 2. Select Settings 3. Expand Users + permissions then click Security roles. 4. Select Edit under More Actions for each security role 5. Select the Business Management tab then review the permissions under Privacy Related Privileges. 6. Ensure that the appropriate privileges are assigned based on organizational policy.
How it is fixed
Fix method: Guidance or infrastructure patch
To configure the extract customer data privileges from Microsoft Dynamics 365 privilege, use the Power Platform Admin Center: 1. Log in to https://admin.powerplatform.microsoft.com and select the appropriate environment. 2. Select Settings 3. Expand Users + permissions then click Security roles. 4. Select Edit under More Actions for each security role 5. Select the Business Management tab then review the permissions under Privacy Related Privileges. 6. Enable or disable privilege based on organizational policy. Note: Enabling these privileges will allow users to extract customer data from Microsoft Dynamics 365. For more information, review the corresponding user documentation.
Properties
- Operating systems
- Any
- Tags
- power-platformsaas
- Reference
- CIS Microsoft Dynamics 365 Power Platform Benchmark v1.0.1 - 3.2 Ensure 'Extract customer data privileges from Microsoft Dynamics 365 is controlled'