Ensure manager access members cannot modify shared drive settings

OrtaDüzey 1Manuel incelemegoogle-workspace

Açıklama

Only administrators should be able to modify shared drive settings. Allowing manager access members to override or modify shared drive settings can allow intentional and unintentional data access by unauthorized users.

Nasıl denetlenir

Denetim yöntemi: Manuel inceleme

Bu öneri otomatik olarak denetlenemez. --include-manual parametresini verdiğinizde tarama bunu bu talimatlarla birlikte listeler.

To verify this setting via the Google Admin Console: 1. Log in to https://admin.google.com as an administrator 2. Select Apps 3. Select Google Workspace 4. Select Drive and Docs 5. Select Sharing settings 6. Under Shared drive creation, ensure Allow members with manager access to override the settings below is unchecked

Nasıl düzeltilir

Düzeltme yöntemi: Kılavuz veya altyapı yaması

To configure this setting via the Google Admin Console: 1. Log in to https://admin.google.com as an administrator 2. Select Apps 3. Select Google Workspace 4. Select Drive and Docs 5. Select Sharing settings 6. Under Shared drive creation, set Allow members with manager access to override the settings below to unchecked 7. Select Save

Özellikler

İşletim sistemleri: Herhangi biri
Etiketler: access-controlgoogle-workspacesaas
Referans: CIS Google Workspace Foundations Benchmark v1.4.0 - 3.1.2.1.2.2 Ensure manager access members cannot modify shared drive settings