rules/findings/m365/microsoft_teams/teams/ms-teams-external-file-sharing-enabled-only-for-approved-cloud-storage-services.json
|
{
"args": [ ], "provider": "Microsoft365", "serviceType": "Microsoft Teams", "serviceName": "Microsoft 365", "displayName": "Ensure external file sharing in Teams is enabled for only approved cloud storage services", "description": "\r\n\t\tMicrosoft Teams enables collaboration via file sharing. This file sharing is conducted within Teams, using SharePoint Online, by default; however, third-party cloud services are allowed as well. \r\n\t\t**Note**: Skype for business is deprecated as of July 31, 2021 although these settings may still be valid for a period of time. See the link in the references section for more information. \r\n ", "rationale": "Ensuring that only authorized cloud storage providers are accessible from Teams will help to dissuade the use of non-approved storage providers.", "impact": "The impact associated with this change is highly dependent upon current practices in the tenant. If users do not use other storage providers, then minimal impact is likely. However, if users do regularly utilize providers outside of the tenant this will affect their ability to continue to do so.", "remediation": { "text": "\r\n\t\t\t###### To set external file sharing in Teams: \r\n\t\t\t1. Navigate to Microsoft Teams admin center https://admin.teams.microsoft.com. \r\n\t\t\t2. Click to expand Teams select Teams settings. \r\n\t\t\t3. Set any unauthorized providers to Off.\r\n\t", "code": { "powerShell": null, "iac": null, "terraform": null, "other": null } }, "recommendation": null, "references": [ "https://learn.microsoft.com/en-us/microsoft-365/enterprise/manage-skype-for-business-online-with-microsoft-365-powershell?view=o365-worldwide" ], "compliance": [ { "name": "CIS Microsoft 365 Foundations Benchmark", "version": "7.0.0", "reference": "8.1.1", "profile": [ "E3 Level 2", "E5 Level 2" ] } ], "level": "medium", "tags": [ ], "rule": { "path": "o365_teams_client_settings", "subPath": null, "selectCondition": { }, "query": [ { "filter": [ { "conditions": [ [ "AllowDropbox", "eq", "true" ], [ "AllowBox", "eq", "true" ], [ "AllowGoogleDrive", "eq", "true" ], [ "AllowShareFile", "eq", "true" ], [ "AllowEgnyte", "eq", "true" ] ], "operator": "or" } ] } ], "shouldExist": null, "returnObject": null, "removeIfNotExists": null }, "output": { "html": { "data": { "properties": { "AllowDropbox": "Allow Dropbox", "AllowBox": "Allow Box", "AllowGoogleDrive": "Allow Google Drive", "AllowShareFile": "Allow Share File", "AllowEgnyte": "Allow Egnyte" }, "expandObject": null }, "table": "default", "decorate": [ { "itemName": "Allow Dropbox", "itemValue": "enabled", "className": "badge badge-danger badge-xl" }, { "itemName": "Allow Box", "itemValue": "enabled", "className": "badge badge-danger badge-xl" }, { "itemName": "Allow Google Drive", "itemValue": "enabled", "className": "badge badge-danger badge-xl" }, { "itemName": "Allow Share File", "itemValue": "enabled", "className": "badge badge-danger badge-xl" }, { "itemName": "Allow Egnyte", "itemValue": "enabled", "className": "badge badge-danger badge-xl" } ], "emphasis": [ ], "actions": { "objectData": { "properties": [ "*" ], "expandObject": null, "limit": null }, "showGoToButton": "True", "showModalButton": "True", "directLink": null } }, "text": { "data": { "properties": { }, "expandObject": null }, "status": { "keyName": [ ], "message": "Ensure external file sharing in Teams is enabled for only approved cloud storage services", "defaultMessage": null }, "properties": { "resourceName": null, "resourceId": "ConfigId", "resourceType": "TeamsClientConfiguration" }, "onlyStatus": false } }, "idSuffix": "teams_external_file_sharing_enabled_only_for_approved_cloud_storage", "notes": [ ], "categories": [ ], "immutable_properties": [ "Identity", "ConfigId", "Key.SchemaId.XName.name" ], "id": "microsoft365_2171" } |