Ensure 'Access to the environment is restricted by location'

점검 방법

감사 방식: 수동 검토

이 권장 사항은 자동으로 점검할 수 없습니다. --include-manual 옵션을 전달하면 스캔 결과에 이 지침과 함께 표시됩니다.

Verify that access to the environment is restricted by location. In the Microsoft 365 Admin Center: 1. Log in to https://admin.microsoft.com as a Global Administrator or Conditional Access administrator. 2. Go to Admin centers and click on Azure Active Directory. 3. Select Enterprise applications then, under Security, select Conditional Access. 4. Ensure a policy exists to restrict location.

조치 방법

조치 방식: 가이드 또는 인프라 패치

Ensure access to the environment is restricted by location. In the Microsoft 365 Admin Center: 1. Log in to https://admin.microsoft.com as a Global Administrator or Conditional Access administrator. 2. Go to Admin centers and click on Azure Active Directory. 3. Select Enterprise applications then, under Security, select Conditional Access. 4. Click New policy and create a name. 5. Go to Assignments > Users or workload identity > Users and groups > 6. Under Include > select All users (and do not exclude any user). 7. Under Exclude, select Users and groups, add the organizations emergency access or break-glass accounts. 8. Select Cloud apps or actions > Include and click Select apps 9. Choose Microsoft Dataverse Application or Microsoft Dynamics ERP for Finance and Operations application. 10. Select Conditions > Location configure to Yes 11. Under Include select Selected locations a. Select the blocked location created for the organization. b. Click Select. 12. Select Access controls > click Block Access and click Select. 13. Confirm the settings and set Enable policy to Report-only. 14. Click Create to create and enable the policy.