Microsoft Power Platform
TMA-POWERPLATFORM-1.1
Ensure 'User access to environments is controlled with Security Groups'
Description
If the organization has multiple Microsoft Dataverse environments, security groups can be used to control which licensed users can be a member of a particular environment. Limiting the access and permissions for the accounts that needs access to the information, reduces the risk of having users with improper access to data in the environment.
How it is checked
Audit method: Manual review
Verify that user access to environments is controlled with security groups. In the Power Platform Admin Center: 1. Log in to https://admin.powerplatform.microsoft.com and select the appropriate environment. 2. Select Edit on the Details pane of the environment. 3. Select the pencil icon under Security group. 4. Ensure the appropriate group(s) are selected.
How it is fixed
Fix method: Guidance or infrastructure patch
Ensure that user access to environments is controlled with security groups. In the Power Platform Admin Center: 1. Log in to https://admin.powerplatform.microsoft.com and select the appropriate environment. 2. Select Edit on the Details pane of the environment. 3. Select the pencil icon under Security group. 4. Select the appropriate security group. 5. Select Done followed by Save.
Properties
- Operating systems
- Any
- Tags
- access-controlpower-platformsaas
- Reference
- CIS Microsoft Dynamics 365 Power Platform Benchmark v1.0.1 - 1.1 Ensure 'User access to environments is controlled with Security Groups'