Ensure 'Access to the environment is restricted by location'

低等級 2人工審核power-platform

說明

Location condition in Azure AD Conditional Access, controls access to cloud apps based on the network location of a user. The location condition is commonly used to block access from countries/regions where organizations know traffic should not come from. Restrict access to users by location to reduce unauthorized access. Conditional access policies controls access to cloud apps based on the network location of a user. It then blocks access from countries/regions where it knows traffic should not come from reducing the risk of a breach.

檢查方式

稽核方法: 人工審核

此項建議無法自動檢查。當您傳入 --include-manual 時，掃描結果會列出此項目並附帶這些說明。

Verify that access to the environment is restricted by location. In the Microsoft 365 Admin Center: 1. Log in to https://admin.microsoft.com as a Global Administrator or Conditional Access administrator. 2. Go to Admin centers and click on Azure Active Directory. 3. Select Enterprise applications then, under Security, select Conditional Access. 4. Ensure a policy exists to restrict location.

修補方式

修補方法: 操作指南或基礎設施修補檔

Ensure access to the environment is restricted by location. In the Microsoft 365 Admin Center: 1. Log in to https://admin.microsoft.com as a Global Administrator or Conditional Access administrator. 2. Go to Admin centers and click on Azure Active Directory. 3. Select Enterprise applications then, under Security, select Conditional Access. 4. Click New policy and create a name. 5. Go to Assignments > Users or workload identity > Users and groups > 6. Under Include > select All users (and do not exclude any user). 7. Under Exclude, select Users and groups, add the organizations emergency access or break-glass accounts. 8. Select Cloud apps or actions > Include and click Select apps 9. Choose Microsoft Dataverse Application or Microsoft Dynamics ERP for Finance and Operations application. 10. Select Conditions > Location configure to Yes 11. Under Include select Selected locations a. Select the blocked location created for the organization. b. Click Select. 12. Select Access controls > click Block Access and click Select. 13. Confirm the settings and set Enable policy to Report-only. 14. Click Create to create and enable the policy.

屬性

作業系統: 不限
標籤: access-controlpower-platformsaas
參考資料: CIS Microsoft Dynamics 365 Power Platform Benchmark v1.0.1 - 2.4 Ensure 'Access to the environment is restricted by location'