Only Admins shall be allowed to register 3rd party applications
PreviousAzure AD Logs shall be collectedNextNon-admin users shall be prevented from providing consent to 3rd party applications
Last updated
Ensure that only administrators can register third-party applications that can access the tenant.
Only administrators SHALL be allowed to register third-party applications.
This setting can be configured with any Microsoft licensing.
In the Azure Portal, navigate to Azure Active Directory.
Under Manage, select Users.
Select User settings.
Under App Registrations -> Users can register applications, select No.
Click Save.
Level: Low
The number of times a user should be trying to register a 3rd part application should be low but when they do, they will be blocked. This setting is not generally something that requires any communication before turning on.
Tips
None Currently
Automating with PowerShell: Setting up application consent (cyberdrain.com)
Monitoring with PowerShell: Monitoring oAuth application changes (cyberdrain.com)
Last updated