Detections
Analytics

MS.AAD.5.2v1 - Only administrators SHALL be allowed to consent to applications.

Information

Limiting applications consent to only specific privileged users reduces risk of users giving insecure applications access to their data via [consent grant attacks](https://learn.microsoft.com/en-us/microsoft-365/security/office-365-security/detect-and-remediate-illicit-consent-grants?view=o365-worldwide).

Solution

1. In Microsoft Entra admin center select Enterprise Applications.

2. Under Security, select Consent and permissions. Then select User Consent Settings.

3. Under User consent for applications, select Do not allow user consent.

4. Click Save.

See Also

https://github.com/cisagov/ScubaGear/tree/v1.8.0/

Item Details

Category: ACCESS CONTROL, CONFIGURATION MANAGEMENT

References: 800-53|AC-6(10), 800-53|CM-5

Plugin: microsoft_azure

Control ID: a4239608f1f93e13b2ebd02ed235b8d6a103ae1048d083df89210f741115135b