Skip to content
MitoMito Docs

EIDSCA.AP05: Default Authorization Settings - Sign-up for email based subscription.
ID EIDSCA.AP05
Severity Medium
Suite EIDSCA
Product Entra ID
Feature User and directory settings
Security area Access control
Resource type Tenant
User impact of fixing Low
Effort to fix Low
Reads from Microsoft Graph

What this checks and how to fix it

Section titled “What this checks and how to fix it”

Indicates whether users can sign up for email based subscriptions.

Test script

Section titled “Test script”
https://graph.microsoft.com/beta/policies/authorizationPolicy
.allowedToSignUpEmailBasedSubscriptions -eq 'false'

Remediation action

Section titled “Remediation action”

Microsoft Graph PowerShell: Update-MgPolicyAuthorizationPolicy -AllowedToSignupEmailBasedSubscriptions $false

Section titled “Related links”

MITRE ATT&CK

Section titled “MITRE ATT&CK”
mindmap
  root{{MITRE ATT&CK}}
    (Tactic)
      TA0001 - Initial Access - Initial Access
    (Mitigation)


    (Technique)
Tactic Technique Mitigation
TA0001 - Initial Access - Initial Access

Mito check, based on EIDSCA. Author: Cloud-Architekt. Open-source licences.

Open-source licences. CIS Benchmark material © Center for Internet Security, Inc.; CISA SCuBA baselines are public domain (CC0).

© 2026 Virtual Petals. Mito is a Virtual Petals service, hosted in Microsoft Azure UAE North.