Microsoft 365
TMA-M365-5.1.2.4
Ensure access to the Entra admin center is restricted
Descrição
This setting restricts non-administrators from loading a set of frequently visited pages in the Microsoft Entra admin center and Azure portal, including home, tenant overview, and the users list. What does it not do? - It does not block programmatic access to Microsoft Entra data via PowerShell, Microsoft Graph API, or other tools like Visual Studio. - It does not apply to users with an administrative role, including custom roles. - It does not prevent all access to the admin center. Many areas are still reachable through alternate paths. The Microsoft Entra admin center contains sensitive data and permission settings, which are still enforced based on the user's role. However, an end user may inadvertently change properties or account settings on their own account. This could result in increased administrative overhead. Additionally, a compromised end-user account could be used to en...
Como é verificado
Método de auditoria: Revisão manual
To audit using the UI: 1. Navigate to Microsoft Entra admin center https://entra.microsoft.com/ 2. Expand Entra ID > Users and select User settings. 3. Verify under the Administration center section that Restrict access to Microsoft Entra admin center is set to Yes.
Como é corrigido
Método de correção: Orientação ou patch de infraestrutura
To remediate using the UI: 1. Navigate to Microsoft Entra admin center https://entra.microsoft.com/ 2. Expand Entra ID > Users and select User settings. 3. Set Restrict access to Microsoft Entra admin center to Yes then Save.
Propriedades
- Sistemas operacionais
- Qualquer
- Tags
- access-controlm365saas
- Referência
- CIS Microsoft 365 Foundations Benchmark v7.0.0 - 5.1.2.4 Ensure access to the Entra admin center is restricted