Ensure manager access members cannot modify shared drive settings

中レベル 1手動レビューgoogle-workspace

説明

Only administrators should be able to modify shared drive settings. Allowing manager access members to override or modify shared drive settings can allow intentional and unintentional data access by unauthorized users.

チェック方法

監査方法: 手動レビュー

この推奨事項は自動ではチェックできません。--include-manual を指定すると、スキャン結果にこの手順付きで一覧表示されます。

To verify this setting via the Google Admin Console: 1. Log in to https://admin.google.com as an administrator 2. Select Apps 3. Select Google Workspace 4. Select Drive and Docs 5. Select Sharing settings 6. Under Shared drive creation, ensure Allow members with manager access to override the settings below is unchecked

修正方法

修正方法: ガイダンスまたは IaC パッチ

To configure this setting via the Google Admin Console: 1. Log in to https://admin.google.com as an administrator 2. Select Apps 3. Select Google Workspace 4. Select Drive and Docs 5. Select Sharing settings 6. Under Shared drive creation, set Allow members with manager access to override the settings below to unchecked 7. Select Save

プロパティ

オペレーティングシステム: すべて
タグ: access-controlgoogle-workspacesaas
参照: CIS Google Workspace Foundations Benchmark v1.4.0 - 3.1.2.1.2.2 Ensure manager access members cannot modify shared drive settings