Security group

Also known as: Entra security group, mail-enabled security group

A security group is a Microsoft Entra group that gives a set of users access to resources. Unlike a Microsoft 365 group, it comes without a shared mailbox or SharePoint site.

The Microsoft 365 connector of Rencore Governance scans every Entra ID group in your tenant, security groups and Microsoft 365 groups alike, and a report lists the security groups.

Security groups decide who can reach an app, a site or an environment. When the wrong people are in a group, they get access everywhere the group is used.

For example, a Power Platform environment that stores its data in Dataverse can be restricted to a security group. If the account used for the Power Platform consent is not a member of that group, the scan skips the details of the flows stored there until an administrator adds the account.

You can also restrict who signs in to Rencore Governance by assigning users and security groups to its enterprise application in Microsoft Entra ID.

Limits

Security groups cannot be reviewed as objects of their own, and a security group cannot be assigned as the reviewers of a Review. For mail-enabled security groups and distribution lists, the scan cannot read the owners, so they always show 0 owners.