In the Web Search Engines administration interface, a toggle is available to activate or deactivate crawl for a portal.
Before activating crawl for a tenant, it is necessary to protect all sensitive and/or restricted content by defining content access rights. Without content access rights, all content is considered public and made accessible to crawlers, even if access to the portal is restricted to authenticated users.
Setting the default group to Authenticated in the Access rules administration interface is a reliable way to prevent malicious users from accessing content when crawl is activated.