Power Platform – Implementing Security – Customer Lockbox – How to enable Customer Lockbox policy

Hello All,

Greetings for the day!

Recently I got a chance to speak in India Cloud Security Summit – 2023. Event for all security related topics. I had an opportunity to speak on security related to Power Platform. My topic is – Implementing Customer Lockbox policy.

In this article we will discuss

• What is – Customer Lockbox policy
• Roles required to enable Customer Lockbox policy
• How to enable – Customer Lockbox policy

Why Power Platform Security is important

• Power Platform allows to create end-to-end solution for non technical professional developers / users as well
• This is one of the key reason security is very important for such kind of solutions

Power Platform Security

• Power Platform security is based on strong foundation for security implementation for Azure / Microsoft 365
• Power Platform uses same security stack which Azure uses
• Power Platform security implementation integrates with Microsoft 365 most advanced information and protection compliance tools
• The Power Platform service follows the Security Development Lifecycle (SDL) – we have separate detailed article on SDL, kindly please have a look – https://knowledge-junction.in/2024/01/07/exploring-microsoft-security-development-lifecycle-sdl/

What is Customer Lockbox Policy

• Sometime as response to resolving Microsoft ticket or some issues identified by Microsoft in tenant , Microsoft personnel need to access customer data
• With Power Platform Customer Lockbox feature, Microsoft provides an interface to us / customers to review and take appropriate action (either APPROVE / REJECT) for the request of Microsoft personnel request to access customer data
• Customer lockbox policies only for Managed environments. We have detailed article on Managed Environments, kindly please have a look – https://knowledge-junction.in/2023/12/13/microsoft-365-power-platform-empowering-your-learning-journey-a-comprehensive-guide-to-power-platform-for-beginners-unleashing-the-power-of-managed-environments-in/
• Roles required to enable the Lockbox policy
  • Global Administrator
  • Power Platform Administrator

How to enable Customer Lockbox policy in our tenant

• Navigate to Power Platform admin center – https://admin.powerplatform.microsoft.com

• Select “Gear” icon in the upper-right corner of the Microsoft Power Platform admin center and select “Power Platform settings“

• On click of “Power Platform settings” link we will be redirecting to – “Tenant settings” page – https://admin.powerplatform.microsoft.com/tenantsettings

• From “Tenant settings” page – https://admin.powerplatform.microsoft.com/tenantsettings we can set the “Customer Lockbox” enabled as

• As we click on “Customer Lockbox” setting, right panel opens and having few licensing requirements and toggle to “Enable / Disable” it as

We have couple of more article for Microsoft 365 Customer Lockbox feature, kindly please have a look

• https://knowledge-junction.in/2022/05/24/microsoft-365-customer-lockbox-is-enabled-for-microsoft-teams-important-feature-for-large-tenants-or-more-requests-for-microsoft-support-part-1/
• https://knowledge-junction.in/2022/05/25/microsoft-365-microsoft-purview-customer-lockbox-powershell-cmdlets-and-audit-logs-details-part-2/

REFERENCES

• Exploring Microsoft Security Development Lifecycle (SDL) – https://knowledge-junction.in/2024/01/07/exploring-microsoft-security-development-lifecycle-sdl/
• Exploring managed environments in Power Platform – https://knowledge-junction.in/2023/12/13/microsoft-365-power-platform-empowering-your-learning-journey-a-comprehensive-guide-to-power-platform-for-beginners-unleashing-the-power-of-managed-environments-in/
• Microsoft 365 – Customer lockbox is enabled for Microsoft Teams: Important feature for large tenants or more requests for Microsoft Support – Part 1 – https://knowledge-junction.in/2022/05/24/microsoft-365-customer-lockbox-is-enabled-for-microsoft-teams-important-feature-for-large-tenants-or-more-requests-for-microsoft-support-part-1/
• Microsoft 365 – Microsoft Purview Customer Lockbox – PowerShell cmdlets and Audit Logs : details– Part 2 – https://knowledge-junction.in/2022/05/25/microsoft-365-microsoft-purview-customer-lockbox-powershell-cmdlets-and-audit-logs-details-part-2/