Summer System Cleaning: Securing Environments
In part 2 of her “summer cleaning” series for Power Platform environments, Kylie Kiser focuses on a deep clean of system security.
Key Takeaways
- Roles: Kylie suggests that to maintain system security, users should review all active security roles and teams and determine who is using them and why. Also, identify high-risk permissions and remove unnecessary access to reduce security and compliance risks.
- User and team-based roles: User and team-based role assignments should be reviewed to identify and remove unnecessary access and ensure all permissions and memberships reflect current business needs.
- Column-level security: Within column-level security, specific users are granted access to specific fields. Ensure only necessary fields are protected and that the correct users or teams have the correct access. Make sure that each environment has an appropriate security group assigned to it as well.
- Final tips: Ensure users receive only the minimum permissions required. Verify that sensitive data is protected through actual security controls.
