Description:

Verifies that non-admins are prevented from consenting third-party apps.

Why:

Microsoft recommends to allow to user consent for apps from verified publisher for selected permissions.

Configured: Non-admins are prevented from consenting third-party apps.

Not Configured: Non-admins are not prevented from consenting third-party apps.

Scoring: Contributes up to 1 point to the Posture Recommendations score.

Category: Identity

Microsoft Licensing: Works with Basic licensing

Remediation in Augmentt: No in-product remediation — remediate in the Microsoft admin portals.

Compliance Frameworks:

  • CISA SCuBA — MS.AAD.5.2

Microsoft documentation: