Control: 1.3 Ensure that 'Users can create Azure AD Tenants' is set to 'No'
Description
Require administrators or appropriately delegated users to create new tenants.
It is recommended to only allow an administrator to create new tenants. This prevent users from creating new Azure AD or Azure AD B2C tenants and ensures that only authorized users are able to do so.
Remediation
From Azure Portal
- From Azure Home select the Portal Menu.
- Select
Azure Active Directory. - Select
Users. - Select
User settings. - Set
Users can create Azure AD TenantstoNo.
Usage
Run the control in your terminal:
powerpipe control run azure_compliance.control.cis_v200_1_3Snapshot and share results via Turbot Pipes:
powerpipe loginpowerpipe control run azure_compliance.control.cis_v200_1_3 --shareSQL
This control uses a named query:
ad_manual_control