Ensure 'Creation of new trial, production, and sandbox environments' is restricted to 'Administrators'

中级别 1人工审核power-platform

说明

An environment is a space to store, manage, and share organizational data, apps, and flows. It also serves as a container to separate apps that may have different roles, security requirements, or target audiences. Power Apps automatically creates a single default environment for each tenant, which is shared by all users in that tenant. For managing environments centrally and to prevent environment sprawl, it is suggested to limit the ability of environment creation to specific users. Any PowerApps licensed user can create an environment. If someone in the organization is on a Power Apps or Power Automate per-user plan, they may have permission to create their own environment. These environments can be used and shared by Dynamics 365, Power Apps portals and apps, and Power Automate flows. Environments can store multiple Dataverse tables. Power Platform apps and Dynamics 365 can then co...

检查方式

审计方法: 人工审核

此项建议无法自动检查。当您传入 --include-manual 时，扫描结果会列出该项并附带这些说明。

Verify that the creation of new trial, production, and sandbox environment is restricted to administrators. In the Power Platform Admin Center: 1. Log in to https://admin.powerplatform.microsoft.com and select the appropriate environment. 2. Select the gear icon in the top right corner then select Power Platform Settings. 3. Under Who can create production and sandbox environments ensure that Only specific admins is selected. Note: This restricts creation to Global admins, Dynamics 365 service admins, Power Platform service admins, and Delegated admins. 4. Under Who can create trial environments ensure that Only specific admins is selected. Note: This restricts creation to Global admins, Dynamics 365 service admins, Power Platform service admins, and Delegated admins.

修复方式

修复方法: 操作指南或基础设施补丁

Ensure that the creation of new trial, production, and sandbox environment is restricted to administrators. In the Power Platform Admin Center: 1. Log in to https://admin.powerplatform.microsoft.com and select the appropriate environment. 2. Select the gear icon in the top right corner then select Power Platform Settings. 3. Under Who can create production and sandbox environments select Only specific admins. Note: This restricts creation to Global admins, Dynamics 365 service admins, Power Platform service admins, and Delegated admins 4. Under Who can create trial environments select Only specific admins. Note: This restricts creation to Global admins, Dynamics 365 service admins, Power Platform service admins, and Delegated admins 5. Click Save

属性

操作系统: 任意
标签: power-platformsaas
参考: CIS Microsoft Dynamics 365 Power Platform Benchmark v1.0.1 - 2.1 Ensure 'Creation of new trial, production, and sandbox environments' is restricted to 'Administrators'