Ensure manager access members cannot modify shared drive settings

보통레벨 1수동 검토google-workspace

설명

Only administrators should be able to modify shared drive settings. Allowing manager access members to override or modify shared drive settings can allow intentional and unintentional data access by unauthorized users.

점검 방법

감사 방식: 수동 검토

이 권장 사항은 자동으로 점검할 수 없습니다. --include-manual 옵션을 전달하면 스캔 결과에 이 지침과 함께 표시됩니다.

To verify this setting via the Google Admin Console: 1. Log in to https://admin.google.com as an administrator 2. Select Apps 3. Select Google Workspace 4. Select Drive and Docs 5. Select Sharing settings 6. Under Shared drive creation, ensure Allow members with manager access to override the settings below is unchecked

조치 방법

조치 방식: 가이드 또는 인프라 패치

To configure this setting via the Google Admin Console: 1. Log in to https://admin.google.com as an administrator 2. Select Apps 3. Select Google Workspace 4. Select Drive and Docs 5. Select Sharing settings 6. Under Shared drive creation, set Allow members with manager access to override the settings below to unchecked 7. Select Save

속성

운영 체제: 모두
태그: access-controlgoogle-workspacesaas
참고 자료: CIS Google Workspace Foundations Benchmark v1.4.0 - 3.1.2.1.2.2 Ensure manager access members cannot modify shared drive settings