Ensure Dataverse environments are restricted to a security group

SrednjaNivo 2Ručni pregledpower-platform

Opis

Without a security group, every licensed user in the tenant is added to an environment's Dataverse database. Portal-only setting, so this is a manual review.

Kako se proverava

Metod provere: Ručni pregled

Ova preporuka se ne može proveriti automatski. Skeniranje je navodi sa ovim uputstvima kada prosledite --include-manual.

Power Platform admin center > Manage > Environments > select each production/sandbox environment > Edit > Security group: confirm a Microsoft Entra security group is assigned [not 'None']. Also review Settings > Users + permissions > Security roles for System Administrator assignments.

Kako se ispravlja

Metod ispravke: Smernica ili zakrpa infrastrukture

Assign a dedicated Microsoft Entra security group to each environment in Power Platform admin center > Environments > Edit > Security group, and remove unneeded System Administrator role assignments.

Svojstva

Operativni sistemi: Bilo koji
Oznake: power-platformgovernance
Referenca: CIS Microsoft Dynamics 365 Power Platform Benchmark v1.0.1 - Environment security groups (no dedicated CIS benchmark exists for Power Platform)