Description:
Verifies that application admin consent workfllow is configured.
Why:
Configuring an admin consent workflow reduces the risk of the previous policy by setting up a process for users to securely request access to applications necessary for business purposes. Administrators have the opportunity to review the permissions requested by new applications and approve or deny access based on a risk assessment.
Configured: Application admin consent workfllow is configured.
Not Configured: Application admin consent workflow is not configured.
Scoring: Contributes up to 1 point to the Posture Recommendations score.
Category: Identity
Microsoft Licensing: Works with Basic licensing
Secure Score Impact: YES — Microsoft Secure Score control aad_admin_consent_workflow.
Remediation in Augmentt: Configure directly in Augmentt (Configure tab); Guided remediation steps (Instructions tab)
Compliance Frameworks:
CISA SCuBA — MS.AAD.5.3
CIS Microsoft 365 Benchmark v6 (Level 1) — 5.1.5.2
CIS Microsoft 365 Benchmark v7 (Level 1) — 5.1.5.2
Microsoft documentation: