Control: 5.17 Ensure that 'Restrict access to Microsoft Entra admin center' is set to 'Yes'
Description
Restrict access to the Microsoft Entra ID administration center to administrators only.
NOTE: This only affects access to the Entra ID administrator's web portal. This setting does not prohibit privileged users from using other methods such as Rest API or Powershell to obtain sensitive information from Microsoft Entra ID.
Remediation
Remediate from Azure Portal
- From Azure Home select the Portal Menu.
- Select
Microsoft Entra ID. - Under
Manage, selectUsers. - Under
Manage, selectUser settings. - Under
Administration centre, setRestrict access to Microsoft Entra admin centertoYes - Click
Save.
Default Value
By default, Restrict access to Microsoft Entra admin center is set to No.
Usage
Run the control in your terminal:
powerpipe control run azure_compliance.control.cis_v500_5_17Snapshot and share results via Turbot Pipes:
powerpipe loginpowerpipe control run azure_compliance.control.cis_v500_5_17 --shareSQL
This control uses a named query:
select id as resource, 'info' as status, 'Manual verification required.' as reason, display_name as subscriptionfrom azure_subscription;