EIDSCA-CR02: EIDSCA CR02: Consent Framework - Admin Consent Request - Reviewers will receive email notifications for requests

Platform
Entra ID / M365
Category
EIDSCA Baseline
Severity
Low
Zero Trust pillar
Identity (weight 1)
Golden fixtures
3
Branch coverage
Observed: fixtures prove the verdicts they exercise
Provenance
baseline

What it checks

Entra ID security-configuration control (EIDSCA CR02): evaluates 'notifyReviewers' on the Entra ID admin consent request policy against the recommended secure value.

Recommended value

eq true

Remediation

Configure the Entra ID admin consent request policy so 'notifyReviewers' is set to true. (Entra ID security-configuration baseline, control EIDSCA CR02.)

Fixture-proven verdicts

Every verdict below is proven by a golden fixture in the module's gating test suite. This table derives from the last green run; it cannot be edited by hand.

Verdict scenarios for EIDSCA-CR02
ScenarioExpected verdict
failFAIL
no-dataNot Assessed
passPASS

Framework mappings

EIDSCA
CR02