New Power Platform Policy: Disable sharing PowerApps by default

[buidav]

💡 Summary

By default, users can share their Power Apps with everyone in the tenant. Several recent hardening guides for Power Platform suggest disabling this capability.

• Power PWN
• MS Learn Secure the default environment

Motivation and context

Add additional baseline policies for Power Platform.

Implementation notes

Add baseline policy to and necessary PowerShell/Rego code to check for this policy.

Note that this setting does not have a GUI. It must be configured through Power Apps PowerShell.

$tenantSettings = Get-TenantSettings
$tenantSettings.powerPlatform.powerApps.disableShareWithEveryone = $true
Set-TenantSettings $tenantSettings

Acceptance criteria

• A baseline policy is added to cover this setting.

[wintec01]

@buidav , was this setting introduced to all O365 tenants and set to disableShareWithEveryone : True by default for everyone?