Devolutions.CIEM

0.3.180

modules/Azure/Checks/Test-EntraPolicyEnsureDefaultUserCannotCreateTenants.ps1

                                function Test-EntraPolicyEnsureDefaultUserCannotCreateTenants {

    <#

    .SYNOPSIS

        Authorization policy restricts non-admin users from creating tenants

    .DESCRIPTION

        **Microsoft Entra authorization policy** governs whether default users can create new tenants. This evaluates if tenant creation is disabled for non-admin users via `allowed_to_create_tenants=false`.

    .PARAMETER Check

        CIEMCheck object containing check metadata.

    #>

    [CmdletBinding()]

    [OutputType([PSCustomObject[]])]

    param(

        [Parameter(Mandatory)]

        $Check

    )

    $ErrorActionPreference = 'Stop'

    # TODO: Implement check logic based on Prowler check: entra_policy_ensure_default_user_cannot_create_tenants

    [CIEMScanResult]::Create($Check, 'MANUAL', 'This check requires manual implementation. See Prowler check entra_policy_ensure_default_user_cannot_create_tenants for reference.', 'N/A', 'entra Resources')

}