TMAegis
Другие правила для power-platform

TMA-POWERPLATFORM-3.2

Ensure 'Extract customer data privileges from Microsoft Dynamics 365 is controlled'

СреднийУровень 1Ручная проверкаpower-platform

Описание

Ensure that privileges related to customer data extraction are well tailored for the business needs considering the minimum privileges required. When users are able to export data deliberately, data governance and security can become an impossible activity and can also lead data leakage.

Как проверяется

Метод проверки: Ручная проверка

Эту рекомендацию нельзя проверить автоматически. Сканирование выводит её вместе с этими инструкциями при указании флага --include-manual.

Ensure that the extract customer data privileges from Microsoft Dynamics 365 controlled. In the Power Platform Admin Center:** 1. Log in to https://admin.powerplatform.microsoft.com and select the appropriate environment. 2. Select Settings 3. Expand Users + permissions then click Security roles. 4. Select Edit under More Actions for each security role 5. Select the Business Management tab then review the permissions under Privacy Related Privileges. 6. Ensure that the appropriate privileges are assigned based on organizational policy.

Как исправляется

Метод исправления: Рекомендация или патч инфраструктуры

To configure the extract customer data privileges from Microsoft Dynamics 365 privilege, use the Power Platform Admin Center: 1. Log in to https://admin.powerplatform.microsoft.com and select the appropriate environment. 2. Select Settings 3. Expand Users + permissions then click Security roles. 4. Select Edit under More Actions for each security role 5. Select the Business Management tab then review the permissions under Privacy Related Privileges. 6. Enable or disable privilege based on organizational policy. Note: Enabling these privileges will allow users to extract customer data from Microsoft Dynamics 365. For more information, review the corresponding user documentation.

Свойства

Операционные системы
Любая
Теги
power-platformsaas
Источник
CIS Microsoft Dynamics 365 Power Platform Benchmark v1.0.1 - 3.2 Ensure 'Extract customer data privileges from Microsoft Dynamics 365 is controlled'