Detections
Analytics

MS.POWERPLATFORM.1.1v1 - The ability to create production and sandbox environments SHALL be restricted to admins.

Information

Users creating new Power Platform environments may inadvertently bypass data loss prevention (DLP) policy settings or misconfigure the security settings of their environment.

Solution

1. Sign in to your tenant environment's respective [Power Platform admin
 center](https://learn.microsoft.com/en-us/power-platform/admin/powerapps-us-government#power-apps-us-government-service-urls).

2. In the upper-right corner of the Microsoft Power Platform site,
 select the Gear icon (Settings icon).

3. Select Power Platform settings.

4. Under Who can create production and sandbox environments, select
 Only specific admins.

See Also

https://github.com/cisagov/ScubaGear/tree/v1.8.0/

Item Details

Category: ACCESS CONTROL

References: 800-53|AC-6(10)

Plugin: microsoft_azure

Control ID: 56a4ac78d08dc6f6c0abbf0a0315e991d8af983d7d064989538315123f3bd66e