1. Identity and Access Management
22 articles
- Ensure that 'Multi-Factor Auth Status' is 'Enabled' for all Privileged Users
- Ensure that 'Multi-Factor Auth Status' is 'Enabled' for all Non-Privileged Users
- Ensure Guest Users Are Reviewed on a Regular Basis
- 1.4 Ensure that 'Allow users to remember multi-factor authentication on devices they trust' is 'Disabled
- Ensure that 'Number of methods required to reset' is set to '2'
- 1.6 Ensure that 'Number of days before users are asked to re-confirm their authentication information' is not set to "0"
- Ensure that 'Notify users on password resets?' is set to 'Yes'
- Ensure that 'Notify all admins when other admins reset their password?' is set to 'Yes'
- 1.9 Ensure that 'Users can consent to apps accessing company data on their behalf' is set to 'No'
- Ensure that 'Users can add gallery apps to My Apps' is set to 'No'
- Ensure that 'Users can register applications' is set to 'No'
- 1.12 Ensure that 'Guest user permissions are limited' is set to 'Yes'
- 1.13 Ensure that 'Members can invite' is set to 'No'
- 1.14 Ensure that 'Guests can invite' is set to 'No'
- Ensure that 'Restrict access to Azure AD administration portal' is set to 'Yes'
- Ensure that 'Restrict user ability to access groups features in the Access Pane' is set to 'No'
- Ensure that 'Users can create security groups in Azure portals, API or PowerShell' is set to 'No' .
- Ensure that 'Owners can manage group membership requests in the Access Panel' is set to 'No'
- Ensure that 'Users can create Microsoft 365 groups in Azure portals, API or PowerShell' is set to 'No' .
- Ensure that 'Require Multi-Factor Authentication to register or join devices with Azure AD' is set to 'Yes'
- Ensure That No Custom Subscription Administrator Roles Exist (Automated)
- Ensure that 'Security Defaults' is Enabled in Microsoft Entra ID