rules/findings/m365/microsoft_teams/apps/ms-teams-app-permission-policies-not-configured.json
|
{
"args": [ ], "provider": "Microsoft365", "serviceType": "Microsoft Teams", "serviceName": "Microsoft 365", "displayName": "Ensure app permission policies are configured", "description": "This policy setting controls which class of apps are available for users to install.", "rationale": "Allowing users to install third-party or unverified apps poses a potential risk of introducing malicious software to the environment.", "impact": "Users will only be able to install approved classes of apps.", "remediation": { "text": "\r\n\t\t\t###### To remediate using the UI: \r\n\t\t\t1. Navigate to Microsoft Teams admin center https://admin.teams.microsoft.com. \r\n\t\t\t2. Click to expand Teams apps select Manage apps. \r\n\t\t\t3. In the upper right click Actions \u003e Org-wide app settings. \r\n\t\t\t4. For Microsoft apps set Let users install and use available apps by default to On or less permissive. \r\n\t\t\t5. For Third-party apps set Let users install and use available apps by default to Off. \r\n\t\t\t6. For Custom apps set Let users install and use available apps by default to Off. \r\n\t\t\t7. For Custom apps set Upload custom apps for personal use to Off. \r\n\t", "code": { "powerShell": null, "iac": null, "terraform": null, "other": null } }, "recommendation": null, "references": [ "https://learn.microsoft.com/en-us/microsoftteams/app-centric-management", "https://learn.microsoft.com/en-us/microsoft-365/security/office-365-security/step-by-step-guides/reducing-attack-surface-in-microsoft-teams?view=o365-worldwide#disabling-third-party--custom-apps" ], "compliance": [ { "name": "CIS Microsoft 365 Foundations Benchmark", "version": "6.0.1", "reference": "8.4.1", "profile": [ "E3 Level 1", "E5 Level 1" ] } ], "level": "medium", "tags": [ ], "rule": { "path": "", "subPath": null, "selectCondition": { }, "query": [ ], "shouldExist": null, "returnObject": null, "removeIfNotExists": null }, "output": { "html": { "data": { "expandObject": null }, "table": "default", "decorate": [ ], "emphasis": [ ], "actions": { "objectData": { "properties": [ "*" ], "expandObject": null, "limit": null }, "showGoToButton": "True", "showModalButton": "True", "directLink": null } }, "text": { "data": { "properties": { }, "expandObject": null }, "status": { "keyName": [ ], "message": "Ensure app permission policies are configured", "defaultMessage": null }, "properties": { "resourceName": null, "resourceId": null, "resourceType": null }, "onlyStatus": false } }, "idSuffix": "teams_app_permissions_not_configured", "notes": [ ], "categories": [ ], "immutable_properties": [ ], "id": "microsoft365_2167" } |