Control: 1.15 Ensure that 'Restrict user ability to access groups features in the Access Pane' is Set to 'Yes'
Description
Restrict access to the Azure AD administration portal to administrators only.
The Azure AD administrative portal has sensitive data. All non-administrators should be prohibited from accessing any Azure AD data in the administration portal to avoid exposure.
Remediation
From Console
- Log in to Azure Active Directory
- Go to
Users - Go to
User settings - Set
Restrict access to Azure AD administration portalto Yes
Note: By default, Restrict access to Azure AD administration portal is set to No.
Usage
Run the control in your terminal:
powerpipe control run azure_compliance.control.cis_v140_1_15Snapshot and share results via Turbot Pipes:
powerpipe loginpowerpipe control run azure_compliance.control.cis_v140_1_15 --shareSQL
This control uses a named query:
ad_manual_control