TMAegis
power-platform のその他のルール

Microsoft Power Platform

TMA-POWERPLATFORM-3.2

Ensure 'Extract customer data privileges from Microsoft Dynamics 365 is controlled'

中レベル 1手動レビューpower-platform

説明

Ensure that privileges related to customer data extraction are well tailored for the business needs considering the minimum privileges required. When users are able to export data deliberately, data governance and security can become an impossible activity and can also lead data leakage.

チェック方法

監査方法: 手動レビュー

この推奨事項は自動ではチェックできません。--include-manual を指定すると、スキャン結果にこの手順付きで一覧表示されます。

Ensure that the extract customer data privileges from Microsoft Dynamics 365 controlled. In the Power Platform Admin Center:** 1. Log in to https://admin.powerplatform.microsoft.com and select the appropriate environment. 2. Select Settings 3. Expand Users + permissions then click Security roles. 4. Select Edit under More Actions for each security role 5. Select the Business Management tab then review the permissions under Privacy Related Privileges. 6. Ensure that the appropriate privileges are assigned based on organizational policy.

修正方法

修正方法: ガイダンスまたは IaC パッチ

To configure the extract customer data privileges from Microsoft Dynamics 365 privilege, use the Power Platform Admin Center: 1. Log in to https://admin.powerplatform.microsoft.com and select the appropriate environment. 2. Select Settings 3. Expand Users + permissions then click Security roles. 4. Select Edit under More Actions for each security role 5. Select the Business Management tab then review the permissions under Privacy Related Privileges. 6. Enable or disable privilege based on organizational policy. Note: Enabling these privileges will allow users to extract customer data from Microsoft Dynamics 365. For more information, review the corresponding user documentation.

プロパティ

オペレーティングシステム
すべて
タグ
power-platformsaas
参照
CIS Microsoft Dynamics 365 Power Platform Benchmark v1.0.1 - 3.2 Ensure 'Extract customer data privileges from Microsoft Dynamics 365 is controlled'