TMA-POWERPLATFORM-2.1
Ensure 'Creation of new trial, production, and sandbox environments' is restricted to 'Administrators'
Description
An environment is a space to store, manage, and share organizational data, apps, and flows. It also serves as a container to separate apps that may have different roles, security requirements, or target audiences. Power Apps automatically creates a single default environment for each tenant, which is shared by all users in that tenant. For managing environments centrally and to prevent environment sprawl, it is suggested to limit the ability of environment creation to specific users. Any PowerApps licensed user can create an environment. If someone in the organization is on a Power Apps or Power Automate per-user plan, they may have permission to create their own environment. These environments can be used and shared by Dynamics 365, Power Apps portals and apps, and Power Automate flows. Environments can store multiple Dataverse tables. Power Platform apps and Dynamics 365 can then co...
Méthode de vérification
Méthode d'audit: Revue manuelle
Cette recommandation ne peut pas être vérifiée automatiquement. Une analyse la liste avec ces instructions lorsque vous passez --include-manual.
Verify that the creation of new trial, production, and sandbox environment is restricted to administrators. In the Power Platform Admin Center: 1. Log in to https://admin.powerplatform.microsoft.com and select the appropriate environment. 2. Select the gear icon in the top right corner then select Power Platform Settings. 3. Under Who can create production and sandbox environments ensure that Only specific admins is selected. Note: This restricts creation to Global admins, Dynamics 365 service admins, Power Platform service admins, and Delegated admins. 4. Under Who can create trial environments ensure that Only specific admins is selected. Note: This restricts creation to Global admins, Dynamics 365 service admins, Power Platform service admins, and Delegated admins.
Méthode de correction
Méthode de correction: Recommandation ou correctif d'infrastructure
Ensure that the creation of new trial, production, and sandbox environment is restricted to administrators. In the Power Platform Admin Center: 1. Log in to https://admin.powerplatform.microsoft.com and select the appropriate environment. 2. Select the gear icon in the top right corner then select Power Platform Settings. 3. Under Who can create production and sandbox environments select Only specific admins. Note: This restricts creation to Global admins, Dynamics 365 service admins, Power Platform service admins, and Delegated admins 4. Under Who can create trial environments select Only specific admins. Note: This restricts creation to Global admins, Dynamics 365 service admins, Power Platform service admins, and Delegated admins 5. Click Save
Propriétés
- Systèmes d'exploitation
- Tous
- Étiquettes
- power-platformsaas
- Référence
- CIS Microsoft Dynamics 365 Power Platform Benchmark v1.0.1 - 2.1 Ensure 'Creation of new trial, production, and sandbox environments' is restricted to 'Administrators'