Invitation sent to an external domain
AI summary
A ChatGPT invitation policy detects when invitations go to addresses outside your tenant, creating workspace members your directory cannot govern. Review these to verify external access is intentional and has a defined end date, particularly for contractors or partners.
What it detects
Detects invitations to addresses that match no Entra IDMicrosoft Entra IDMicrosoft Entra ID, formerly Azure Active Directory, is the Microsoft identity service behind every Microsoft 365 tenant.Read more user or match a guest.
Why it matters
An invitation to an address outside the tenant creates a workspace member the directory will never govern. Sometimes that is deliberate - a contractor, a partner - but it should be a decision rather than a side effect, and it should have an end date. An address counts as outside when no Entra ID user carries it as UPN or mail, or the user carrying it is a guest, so this needs the Microsoft 365Microsoft 365Microsoft 365 is the Microsoft cloud suite of Teams, SharePoint, OneDrive, Exchange and the Office apps.Read more Users inventory scanned in the same environment: without it every invitation matches.
The rule
Every ChatGPT Invitation where External Domain is true
In Rencore Governance
Details
| Applies to | ChatGPT invitation |
|---|---|
| Connector | ChatGPT Enterprise |
| Severity | Medium |
| Category | External Access |
| Recommended | Yes |
| Recommended automation | None |
| License type | Standard |
Related policies
Other policies that check ChatGPT invitation objects:
Frequently asked questions
What does the invitation sent to an external domain policy detect?
The Invitation sent to an external domain policy detects invitations to addresses that match no Entra ID user or match a guest.
Which objects does the invitation sent to an external domain policy check?
The Invitation sent to an external domain policy checks ChatGPT invitation objects from the ChatGPT Enterprise inventory and reports each one that matches its rule as a violation.
How severe is a violation of the invitation sent to an external domain policy?
Violations of the Invitation sent to an external domain policy have Medium severity. The policy is in the External Access category.
Which module includes the invitation sent to an external domain policy?
The Invitation sent to an external domain policy comes with the ChatGPT Enterprise connector (in preview) in the AI & Agents module of Rencore Governance, an add-on module on the Premium and Enterprise Plans.
Was this page helpful?
Thanks for the feedback.
Thanks. What was wrong?