💡 Summary

By default, users can share their Power Apps with everyone in the tenant.
Several recent hardening guides for Power Platform suggest disabling this capability.

• Power PWN
• MS Learn Secure the default environment

Motivation and context

Add additional baseline policies for Power Platform.

Implementation notes

Add baseline policy to and necessary PowerShell/Rego code to check for this policy.

Note that this setting does not have a GUI.
It must be configured through Power Apps PowerShell.

$tenantSettings = Get-TenantSettings
$tenantSettings.powerPlatform.powerApps.disableShareWithEveryone = $true
Set-TenantSettings $tenantSettings

Acceptance criteria

• A baseline policy is added to cover this setting.