Information
Restricts group creation to administrators with permissions only.
Rationale:
Self-service group management enables users to create and manage security groups or Office 365 groups in Azure Active Directory (Azure AD). Unless a business requires this day-to-day delegation for some users, self-service group management should be disabled.
Impact:
Setting to Yes could create administrative overhead by customers seeking certain group memberships that will have to be manually managed by administrators with appropriate permissions.
NOTE: Nessus has not performed this check. Please review the benchmark to ensure target compliance.
Solution
From Azure Portal
From Azure Home select the Portal Menu
Select Azure Active Directory
Select Groups
Select General under Settings
Ensure that Restrict user ability to access groups features in the Access Panel is set to Yes
Default Value:
By default, Restrict user ability to access groups features in the Access Pane is set to No