Detections
Analytics

MS.AAD.5.1v1 - Only administrators SHALL be allowed to register applications.

Information

Application access for the tenant presents a heightened security risk compared to interactive user access because applications are typically not subject to critical security protections, such as MFA policies. Reduce risk of unauthorized users installing malicious applications into the tenant by ensuring that only specific privileged users can register applications.

Solution

1. In Microsoft Entra admin center, select Users.

2. Select User settings.

3. For Users can register applications, select No.

4. Click Save.

See Also

https://github.com/cisagov/ScubaGear/tree/v1.8.0/

Item Details

Category: ACCESS CONTROL, CONFIGURATION MANAGEMENT

References: 800-53|AC-6(10), 800-53|CM-5

Plugin: microsoft_azure

Control ID: 9271bddd5ecf041246d0f1c4bce0c524e8f1c6d9efef959b95278a3cbf6b9958