Light mode
Microsoft Power Platform Baseline Report
| Tenant Display Name | Tenant Domain Name | Report Date | Baseline Version | Module Version |
|---|---|---|---|---|
| tqhjy | tqhjy.onmicrosoft.com | 10/15/2026 21:46:53 Coordinated Universal Time | 1 | 2.0.0 |
Policy Indicators:
BOD 25-01 Requirement
Required by CISA BOD 25-01
Automated Check
Automatically verified by ScubaGear
Manual
Requires manual verification
POWERPLATFORM-1 Creation of Power Platform Environments
| Control ID | Requirement | Result | Criticality | Details |
|---|---|---|---|---|
| MS.POWERPLATFORM.1.1v1 | The ability to create production and sandbox environments SHALL be restricted to administrators. | Pass | Shall | Requirement met |
| MS.POWERPLATFORM.1.2v1 | The ability to create trial environments SHALL be restricted to administrators. | Pass | Shall | Requirement met |
POWERPLATFORM-2 Power Platform Data Loss Prevention Policies
| Control ID | Requirement | Result | Criticality | Details |
|---|---|---|---|---|
| MS.POWERPLATFORM.2.1v1 | A DLP policy SHALL be created to restrict connector access in the default Power Platform environment. | Fail | Shall | No policy found that applies to default environment |
| MS.POWERPLATFORM.2.2v1 | Non-default environments SHOULD have at least one DLP policy. | Warning | Should | No DLP policies found |
POWERPLATFORM-3 Power Platform Tenant Isolation
| Control ID | Requirement | Result | Criticality | Details |
|---|---|---|---|---|
| MS.POWERPLATFORM.3.1v1 | Power Platform tenant isolation SHALL be enabled. | Pass | Shall | Requirement met |
| MS.POWERPLATFORM.3.2v1 | An inbound/outbound connection allowlist SHOULD be configured. | N/A | Should/Not-Implemented | This product does not currently have the capability to check compliance for this policy. See Secure Configuration Baseline policy for instructions on manual check |
POWERPLATFORM-4 Power Apps Content Security Policy
| Control ID | Requirement | Result | Criticality | Details |
|---|---|---|---|---|
| MS.POWERPLATFORM.4.1v1 | Content Security Policy (CSP) SHALL be enforced for model-driven and canvas Power Apps. | N/A | Shall/Not-Implemented | This product does not currently have the capability to check compliance for this policy. See Secure Configuration Baseline policy for instructions on manual check |
POWERPLATFORM-5 Power Pages Creation
| Control ID | Requirement | Result | Criticality | Details |
|---|---|---|---|---|
| MS.POWERPLATFORM.5.1v1 | The ability to create Power Pages sites SHOULD be restricted to administrators. | Pass | Should | Requirement met |
POWERPLATFORM-6 Power Apps Sharing Controls
| Control ID | Requirement | Result | Criticality | Details |
|---|---|---|---|---|
| MS.POWERPLATFORM.6.1v1 | The "Share with everyone" feature SHOULD be disabled. | Pass | Should | Requirement met |