TMA-POWERPLATFORM-2.1
Ensure 'Creation of new trial, production, and sandbox environments' is restricted to 'Administrators'
Descripción
An environment is a space to store, manage, and share organizational data, apps, and flows. It also serves as a container to separate apps that may have different roles, security requirements, or target audiences. Power Apps automatically creates a single default environment for each tenant, which is shared by all users in that tenant. For managing environments centrally and to prevent environment sprawl, it is suggested to limit the ability of environment creation to specific users. Any PowerApps licensed user can create an environment. If someone in the organization is on a Power Apps or Power Automate per-user plan, they may have permission to create their own environment. These environments can be used and shared by Dynamics 365, Power Apps portals and apps, and Power Automate flows. Environments can store multiple Dataverse tables. Power Platform apps and Dynamics 365 can then co...
Cómo se verifica
Método de auditoría: Revisión manual
Esta recomendación no se puede verificar automáticamente. Un escaneo la lista con estas instrucciones cuando se pasa --include-manual.
Verify that the creation of new trial, production, and sandbox environment is restricted to administrators. In the Power Platform Admin Center: 1. Log in to https://admin.powerplatform.microsoft.com and select the appropriate environment. 2. Select the gear icon in the top right corner then select Power Platform Settings. 3. Under Who can create production and sandbox environments ensure that Only specific admins is selected. Note: This restricts creation to Global admins, Dynamics 365 service admins, Power Platform service admins, and Delegated admins. 4. Under Who can create trial environments ensure that Only specific admins is selected. Note: This restricts creation to Global admins, Dynamics 365 service admins, Power Platform service admins, and Delegated admins.
Cómo se corrige
Método de corrección: Guía o parche de infraestructura
Ensure that the creation of new trial, production, and sandbox environment is restricted to administrators. In the Power Platform Admin Center: 1. Log in to https://admin.powerplatform.microsoft.com and select the appropriate environment. 2. Select the gear icon in the top right corner then select Power Platform Settings. 3. Under Who can create production and sandbox environments select Only specific admins. Note: This restricts creation to Global admins, Dynamics 365 service admins, Power Platform service admins, and Delegated admins 4. Under Who can create trial environments select Only specific admins. Note: This restricts creation to Global admins, Dynamics 365 service admins, Power Platform service admins, and Delegated admins 5. Click Save
Propiedades
- Sistemas operativos
- Cualquiera
- Etiquetas
- power-platformsaas
- Referencia
- CIS Microsoft Dynamics 365 Power Platform Benchmark v1.0.1 - 2.1 Ensure 'Creation of new trial, production, and sandbox environments' is restricted to 'Administrators'