Ensure trial environment creation is restricted to administrators

BajaNivel 2Automatizadapower-platform

Descripción

Trial environments created by makers frequently hold real data with no governance. Requires Microsoft.PowerApps.Administration.PowerShell and an authenticated session (Add-PowerAppsAccount) as a Power Platform administrator; the audit throws if the module is missing.

Cómo se verifica

Método de auditoría: Comando de shell

shell

$ErrorActionPreference = 'Stop'; if (-not (Get-Command Get-TenantSettings -ErrorAction SilentlyContinue)) { throw 'Microsoft.PowerApps.Administration.PowerShell is not loaded: run Add-PowerAppsAccount first' }; $s = Get-TenantSettings -ErrorAction Stop; if ($s.disableTrialEnvironmentCreationByNonAdminUsers -eq $true) { 'compliant' } else { 'noncompliant' }

Salida esperada: compliant

Cómo se corrige

Método de corrección: Guía o parche de infraestructura

Power Platform admin center > Settings > Tenant settings > Trial environment assignments > Only specific admins (or set disableTrialEnvironmentCreationByNonAdminUsers = $true via Set-TenantSettings).

Propiedades

Sistemas operativos: Cualquiera
Etiquetas: power-platformgovernance
Referencia: CIS Microsoft Dynamics 365 Power Platform Benchmark v1.0.1 - Trial environment creation (no dedicated CIS benchmark exists for Power Platform)

Verificar este host

Ejecute esto en un equipo que tenga permiso para auditar. El escaneo es de solo lectura.

shell

tmaegis scan --target power-platform --level 2