Ensure 'Dynamics 365 restricts incoming email actions for public queue mailboxes'

MediumLevel 1Manual reviewpower-platform

Description

Microsoft Dynamics 365 can be used in Outlook to track email messages, contacts, tasks, and appointments. When an email message, contact, task, or appointment record is tracked, a copy of that record is saved as an activity in Dynamics 365 for Customer Engagement and synchronized with the Outlook record. This can be viewed and edited in Dynamics 365 for Outlook or Customer Engagement. If Outlook is synced to a mobile device, the mobile device will also have access to these records. Options to automatically track email messages: Email messages from Dynamics 365 apps Leads, Contacts, and Accounts: Tracks email messages only if they originate from someone with a Dynamics 365 for Customer Engagement lead, contact, or account record. The recommended state for this setting is: Email messages from Dynamics 365 apps Leads, Contacts, and Accounts An unauthenticated attacker can create arbitrar...

How it is checked

Audit method: Manual review

This recommendation cannot be checked automatically. A scan lists it with these instructions when you pass --include-manual.

Verify that the option Email messages from Dynamics 365 apps Leads, Contacts, and Accounts is selected. In the Power Platform Admin Center: 1. Log in to https://admin.powerplatform.microsoft.com and select the appropriate environment. 2. Select Settings at the top. 3. Expand Business followed by Queues. This will open in a new window. 4. Click on the email boxes to modify. 5. Under EMAIL SETTINGS ensure that the Email messages from Dynamics 365 Leads, Contacts, and Accounts options is selected.

How it is fixed

Fix method: Guidance or infrastructure patch

Ensure that the option Email messages from Dynamics 365 apps Leads, Contacts, and Accounts selected. In the Power Platform Admin Center: 1. Log in to https://admin.powerplatform.microsoft.com and select the appropriate environment. 2. Select Settings at the top. 3. Expand Business followed by Queues. This will open in a new window. 4. Click on the email boxes to modify. 5. Under EMAIL SETTINGS set Convert Incoming Email to Activities to Email messages from Dynamics 365 Leads, Contacts, and Accounts 6. Click Save. Note: Avoid setting the option to All email messages as Dynamics 365 apps will track junk mail as well as business conversations.

Properties

Operating systems: Any
Tags: power-platformsaas
Reference: CIS Microsoft Dynamics 365 Power Platform Benchmark v1.0.1 - 3.3 Ensure 'Dynamics 365 restricts incoming email actions for public queue mailboxes'