Turbot Guardrails Hub 
Hub
Mods
Azure
45
Mods
176
Resource Types
3,033
Policies
1,635
Controls
103
Quick Actions
102
IAM

Policy: Azure > CIS v4.0 > 06 - Identity Services > 06.21 - Ensure 'Users can create M365 groups in Azure portals, API or PowerShell' is set to 'No'

Configures auditing against a CIS Benchmark item.

Level: 2

Restrict Microsoft 365 group creation to administrators only.

Restricting Microsoft 365 group creation to administrators only ensures that creation of Microsoft 365 groups is controlled by the administrator. Appropriate groups should be created and managed by the administrator and group creation rights should not be delegated to any other user.

Targets

This policy targets the following resource types:

Primary Policy

This policy is used with the following primary policy:

Controls

Setting this policy configures this control:

Policy Specification

Schema Type
string
Default
Per Azure > CIS v4.0 > 06 - Identity Services
Valid Values [YAML]
  • Per Azure > CIS v4.0 > 06 - Identity Services

  • Skip

  • Check: Benchmark using attestation

Category

In Your Workspace

Developers