Ensure That 'Users Can Register Applications' Is Set to 'No'

Why This Matters

Allowing any user to register applications in Microsoft Entra ID bypasses security review and approval processes. A malicious or poorly coded third-party application could gain unauthorized access to your organization's data. Restricting application registration to administrators ensures formal security evaluation before applications interact with your tenant.

What Aether365 Checks

Aether365 verifies that the "Users can register applications" setting in Microsoft Entra ID is configured to "No". This check appears in your Aether365 dashboard under the entra-id checks section.

Microsoft references

• Delegate app roles
• Active directory how applications are added
• Security controls v2 governance strategy
• Security controls v2 privileged access
• Security controls v2 privileged access
• Managing user consent for applications using office 365 apis