Ensure manager access members cannot modify shared drive settings

СреднийУровень 1Ручная проверкаgoogle-workspace

Описание

Only administrators should be able to modify shared drive settings. Allowing manager access members to override or modify shared drive settings can allow intentional and unintentional data access by unauthorized users.

Как проверяется

Метод проверки: Ручная проверка

Эту рекомендацию нельзя проверить автоматически. Сканирование выводит её вместе с этими инструкциями при указании флага --include-manual.

To verify this setting via the Google Admin Console: 1. Log in to https://admin.google.com as an administrator 2. Select Apps 3. Select Google Workspace 4. Select Drive and Docs 5. Select Sharing settings 6. Under Shared drive creation, ensure Allow members with manager access to override the settings below is unchecked

Как исправляется

Метод исправления: Рекомендация или патч инфраструктуры

To configure this setting via the Google Admin Console: 1. Log in to https://admin.google.com as an administrator 2. Select Apps 3. Select Google Workspace 4. Select Drive and Docs 5. Select Sharing settings 6. Under Shared drive creation, set Allow members with manager access to override the settings below to unchecked 7. Select Save

Свойства

Операционные системы: Любая
Теги: access-controlgoogle-workspacesaas
Источник: CIS Google Workspace Foundations Benchmark v1.4.0 - 3.1.2.1.2.2 Ensure manager access members cannot modify shared drive settings