Ensure 'Creation of new trial, production, and sandbox environments' is restricted to 'Administrators'

СреднийУровень 1Ручная проверкаpower-platform

Описание

An environment is a space to store, manage, and share organizational data, apps, and flows. It also serves as a container to separate apps that may have different roles, security requirements, or target audiences. Power Apps automatically creates a single default environment for each tenant, which is shared by all users in that tenant. For managing environments centrally and to prevent environment sprawl, it is suggested to limit the ability of environment creation to specific users. Any PowerApps licensed user can create an environment. If someone in the organization is on a Power Apps or Power Automate per-user plan, they may have permission to create their own environment. These environments can be used and shared by Dynamics 365, Power Apps portals and apps, and Power Automate flows. Environments can store multiple Dataverse tables. Power Platform apps and Dynamics 365 can then co...

Как проверяется

Метод проверки: Ручная проверка

Эту рекомендацию нельзя проверить автоматически. Сканирование выводит её вместе с этими инструкциями при указании флага --include-manual.

Verify that the creation of new trial, production, and sandbox environment is restricted to administrators. In the Power Platform Admin Center: 1. Log in to https://admin.powerplatform.microsoft.com and select the appropriate environment. 2. Select the gear icon in the top right corner then select Power Platform Settings. 3. Under Who can create production and sandbox environments ensure that Only specific admins is selected. Note: This restricts creation to Global admins, Dynamics 365 service admins, Power Platform service admins, and Delegated admins. 4. Under Who can create trial environments ensure that Only specific admins is selected. Note: This restricts creation to Global admins, Dynamics 365 service admins, Power Platform service admins, and Delegated admins.

Как исправляется

Метод исправления: Рекомендация или патч инфраструктуры

Ensure that the creation of new trial, production, and sandbox environment is restricted to administrators. In the Power Platform Admin Center: 1. Log in to https://admin.powerplatform.microsoft.com and select the appropriate environment. 2. Select the gear icon in the top right corner then select Power Platform Settings. 3. Under Who can create production and sandbox environments select Only specific admins. Note: This restricts creation to Global admins, Dynamics 365 service admins, Power Platform service admins, and Delegated admins 4. Under Who can create trial environments select Only specific admins. Note: This restricts creation to Global admins, Dynamics 365 service admins, Power Platform service admins, and Delegated admins 5. Click Save

Свойства

Операционные системы: Любая
Теги: power-platformsaas
Источник: CIS Microsoft Dynamics 365 Power Platform Benchmark v1.0.1 - 2.1 Ensure 'Creation of new trial, production, and sandbox environments' is restricted to 'Administrators'