Microsoft Power Platform
TMA-POWERPLATFORM-3.2
Ensure 'Extract customer data privileges from Microsoft Dynamics 365 is controlled'
说明
Ensure that privileges related to customer data extraction are well tailored for the business needs considering the minimum privileges required. When users are able to export data deliberately, data governance and security can become an impossible activity and can also lead data leakage.
检查方式
审计方法: 人工审核
Ensure that the extract customer data privileges from Microsoft Dynamics 365 controlled. In the Power Platform Admin Center:** 1. Log in to https://admin.powerplatform.microsoft.com and select the appropriate environment. 2. Select Settings 3. Expand Users + permissions then click Security roles. 4. Select Edit under More Actions for each security role 5. Select the Business Management tab then review the permissions under Privacy Related Privileges. 6. Ensure that the appropriate privileges are assigned based on organizational policy.
修复方式
修复方法: 操作指南或基础设施补丁
To configure the extract customer data privileges from Microsoft Dynamics 365 privilege, use the Power Platform Admin Center: 1. Log in to https://admin.powerplatform.microsoft.com and select the appropriate environment. 2. Select Settings 3. Expand Users + permissions then click Security roles. 4. Select Edit under More Actions for each security role 5. Select the Business Management tab then review the permissions under Privacy Related Privileges. 6. Enable or disable privilege based on organizational policy. Note: Enabling these privileges will allow users to extract customer data from Microsoft Dynamics 365. For more information, review the corresponding user documentation.
属性
- 操作系统
- 任意
- 标签
- power-platformsaas
- 参考
- CIS Microsoft Dynamics 365 Power Platform Benchmark v1.0.1 - 3.2 Ensure 'Extract customer data privileges from Microsoft Dynamics 365 is controlled'