Ensure 'App creation notification is enabled in the environment'

中级别 1人工审核power-platform

说明

10/07/2026 1.0.1 UPDATE - All Recommendations: Updated CIS Controls mappings and added NIST 800-53r5 and CSF 2.0 12/20/2022 1.0.0 Initial Public Release Alerting on the creation of apps allows for administrators to look for risky apps that users have created that could cause data spillage or accidental elevation of privilege.

检查方式

审计方法: 人工审核

此项建议无法自动检查。当您传入 --include-manual 时，扫描结果会列出该项并附带这些说明。

Verify that App creation notifications are set to enabled. In the Microsoft 365 Security & Compliance Center: - Log in to the Microsoft 365 Security & Compliance Center https://compliance.microsoft.com/ as a tenant Administrator. - Go to Policies > Alert Policy. - Verify a policy exists for app creation notification.

修复方式

修复方法: 操作指南或基础设施补丁

Ensure that App creation notifications are set to enabled. In the Microsoft 365 Security & Compliance Center: - Log in to the Microsoft 365 Security & Compliance Center https://compliance.microsoft.com/ as a tenant Administrator. - Go to Policies > Alert Policy > +New Alert policy. - Name policy and select the Severity and Category for the policy. - In the Activity section scroll down to PowerApps app or search for Publish. - Name the alert and select users (emails) to send alerts to. Ensure that a notification is triggered when a new app is created in the environment.

属性

操作系统: 任意
标签: power-platformsaas
参考: CIS Microsoft Dynamics 365 Power Platform Benchmark v1.0.1 - 4.3 Ensure 'App creation notification is enabled in the environment'