π Azure Active Directory Auth Policy - object.extracts.yaml
- Contextual name: π object.extracts.yaml
- ID:
/types/CA10Z1__CaAzureActiveDirectoryAuthPolicy__c/object.extracts.yaml
- Located in: π Azure Active Directory Auth Policy
Used Inβ
Logic | Policy | Flags |
---|---|---|
π§ prod.logic.yaml π’ | π Microsoft Entra ID Guest Invite Settings is not set to Only Users Assigned To Specific Admin Roles Can Invite Guest Users π’ | π’ x3 |
π§ prod.logic.yaml π’ | π Microsoft Entra ID Guest Users restricted to their own directory objects π’ | π’ x3 |
π§ prod.logic.yaml π’ | π Microsoft Entra ID Tenant Creation is set to Yes π’ | π’ x3 |
π§ prod.logic.yaml π’ | π Microsoft Entra ID Users Can Register Applications is set to Yes π’ | π’ x3 |
Contentβ
---
extracts:
# Values: none, adminsAndGuestInviters, adminsGuestInvitersAndAllMembers, everyone. Not Nullable. Can't have no access, retrieved via policies/authorizationPolicy
- name: "CA10Z1__invitesFromState__c"
value:
FIELD:
path: "CA10Z1__invitesFromState__c"
undeterminedIf:
isEmpty: "Corrupted data. The Allow Invites authorization setting cannot be empty."
# Values:
# User (a0b1b346-4d3e-4e8b-98f8-753987be4970)
# Guest User (10dae51f-b6af-4016-8d66-8c2a99b929b3)
# Restricted Guest User (2af84b1e-32c8-42b7-82bc-daa82404023b).
# Can't have no access, retrieved via policies/authorizationPolicy
- name: "CA10Z1__guestUserRoleId__c"
value:
FIELD:
path: "CA10Z1__guestUserRoleId__c"
undeterminedIf:
isEmpty: "Corrupted data. The Guest User Role Id cannot be empty."
# Values: Enabled, Disabled. Not Nullable. Can't have no access, retrieved via policies/authorizationPolicy
- name: "CA10Z1__defaultPermissionCreateTenants__c"
value:
FIELD:
path: "CA10Z1__defaultPermissionCreateTenants__c"
undeterminedIf:
isEmpty: "Corrupted data. The Allowed To Create Tenants default setting cannot be empty."
# Values: Enabled, Disabled. Not Nullable. Can't have no access, retrieved via policies/authorizationPolicy
- name: "CA10Z1__defaultPermissionCreateApps__c"
value:
FIELD:
path: "CA10Z1__defaultPermissionCreateApps__c"
undeterminedIf:
isEmpty: "Corrupted data. The Allowed To Create Apps default setting cannot be empty."