Ensure Dataverse environments are restricted to a security group

보통레벨 2수동 검토power-platform

설명

Without a security group, every licensed user in the tenant is added to an environment's Dataverse database. Portal-only setting, so this is a manual review.

점검 방법

감사 방식: 수동 검토

이 권장 사항은 자동으로 점검할 수 없습니다. --include-manual 옵션을 전달하면 스캔 결과에 이 지침과 함께 표시됩니다.

Power Platform admin center > Manage > Environments > select each production/sandbox environment > Edit > Security group: confirm a Microsoft Entra security group is assigned [not 'None']. Also review Settings > Users + permissions > Security roles for System Administrator assignments.

조치 방법

조치 방식: 가이드 또는 인프라 패치

Assign a dedicated Microsoft Entra security group to each environment in Power Platform admin center > Environments > Edit > Security group, and remove unneeded System Administrator role assignments.

속성

운영 체제: 모두
태그: power-platformgovernance
참고 자료: CIS Microsoft Dynamics 365 Power Platform Benchmark v1.0.1 - Environment security groups (no dedicated CIS benchmark exists for Power Platform)