Control: 1.16 Ensure that 'Restrict user ability to access groups features in the Access Pane' is set to 'No'
Restrict group creation to administrators only.
Self-service group management enables users to create and manage security groups or Office 365 groups in Azure Active Directory (Azure AD). Unless a business requires this day-to-day delegation for some users, self-service group management should be disabled.
- Log in to Azure Active Directory
- Go to
- Go to
Generalin setting section
- Ensure that
Restrict user ability to access groups featuresin the Access Pane is set to No
Note: By default, Restrict user ability to access groups features in the Access Pane is set to No.
steampipe check azure_compliance.control.cis_v130_1_16
This control uses a named query:ad_manual_control