Ensure 'App creation notification is enabled in the environment'

MediumLevel 1Manual reviewpower-platform

Description

10/07/2026 1.0.1 UPDATE - All Recommendations: Updated CIS Controls mappings and added NIST 800-53r5 and CSF 2.0 12/20/2022 1.0.0 Initial Public Release Alerting on the creation of apps allows for administrators to look for risky apps that users have created that could cause data spillage or accidental elevation of privilege.

How it is checked

Audit method: Manual review

This recommendation cannot be checked automatically. A scan lists it with these instructions when you pass --include-manual.

Verify that App creation notifications are set to enabled. In the Microsoft 365 Security & Compliance Center: - Log in to the Microsoft 365 Security & Compliance Center https://compliance.microsoft.com/ as a tenant Administrator. - Go to Policies > Alert Policy. - Verify a policy exists for app creation notification.

How it is fixed

Fix method: Guidance or infrastructure patch

Ensure that App creation notifications are set to enabled. In the Microsoft 365 Security & Compliance Center: - Log in to the Microsoft 365 Security & Compliance Center https://compliance.microsoft.com/ as a tenant Administrator. - Go to Policies > Alert Policy > +New Alert policy. - Name policy and select the Severity and Category for the policy. - In the Activity section scroll down to PowerApps app or search for Publish. - Name the alert and select users (emails) to send alerts to. Ensure that a notification is triggered when a new app is created in the environment.

Properties

Operating systems: Any
Tags: power-platformsaas
Reference: CIS Microsoft Dynamics 365 Power Platform Benchmark v1.0.1 - 4.3 Ensure 'App creation notification is enabled in the environment'