Detections
Analytics

MS.TEAMS.2.1v2 - External access for users SHALL only be enabled on a per-domain basis.

Information

The default configuration allows members to communicate with all external users with similar access permissions. Unrestricted access can lead to data breaches and other security threats. This policy provides protection against threats posed by unrestricted access by allowing communication with only trusted domains.

Solution

To enable external access for only specific domains:

1. Sign in to the Microsoft Teams admin center.

2. Select Users > External access > Organization settings.

3. Next to Teams and Skype for Business users in external organizations,
 select Allow only specific external domains

4. Select Add external domains. Enter domains allowed, and then select Done

 NOTE: Domains will need to be added in this step in order for users to communicate with them.

5. Click Save.

See Also

https://github.com/cisagov/ScubaGear/tree/v1.8.0/

Item Details

Category: ACCESS CONTROL

References: 800-53|AC-3

Plugin: microsoft_azure

Control ID: 0785ca99078900c1e08e3cf631e4f4ec2ad30cb6291e5daf93ab6924146168bd