Ensure Dataverse environments are restricted to a security group

OrtaDüzey 2Manuel incelemepower-platform

Açıklama

Without a security group, every licensed user in the tenant is added to an environment's Dataverse database. Portal-only setting, so this is a manual review.

Nasıl denetlenir

Denetim yöntemi: Manuel inceleme

Bu öneri otomatik olarak denetlenemez. --include-manual parametresini verdiğinizde tarama bunu bu talimatlarla birlikte listeler.

Power Platform admin center > Manage > Environments > select each production/sandbox environment > Edit > Security group: confirm a Microsoft Entra security group is assigned [not 'None']. Also review Settings > Users + permissions > Security roles for System Administrator assignments.

Nasıl düzeltilir

Düzeltme yöntemi: Kılavuz veya altyapı yaması

Assign a dedicated Microsoft Entra security group to each environment in Power Platform admin center > Environments > Edit > Security group, and remove unneeded System Administrator role assignments.

Özellikler

İşletim sistemleri: Herhangi biri
Etiketler: power-platformgovernance
Referans: CIS Microsoft Dynamics 365 Power Platform Benchmark v1.0.1 - Environment security groups (no dedicated CIS benchmark exists for Power Platform)