Claude user is not member of Entra ID

Last updated Oct 17, 2026 Preview Policies Access & Sharing

AI summary

A Rencore Governance rule detects Claude users not members of your Entra ID directory. These users cannot be managed through centralized policies, creating security gaps that may indicate shadow IT, external contractors without proper access controls, or orphaned accounts.

Severity: Medium Security Recommended Preview

What it detects

Detects users in Claude organizations which are not part of Entra ID.

Why it matters

Users outside the corporate directory bypass identity governance and cannot be managed through centralized policies. This creates security blind spots and may indicate shadow IT, external contractors without proper access controls, or orphaned accounts. All Claude users should be linked to Entra ID for proper identity lifecycle management.

The rule

Every Claude User where M365 User is empty

In Rencore Governance

Details

Applies to	Claude user
Connector	Claude Enterprise
Severity	Medium
Category	Security
Recommended	Yes
Recommended automation	None
License type	Standard

Other policies that check Claude user objects:

Claude Code user is disabled in Entra ID (Medium)
External users in Claude organization (Medium)

Frequently asked questions

What does the Claude user is not member of Entra ID policy detect?

The Claude user is not member of Entra ID policy detects users in Claude organizations which are not part of Entra ID.

Which objects does the Claude user is not member of Entra ID policy check?

The Claude user is not member of Entra ID policy checks Claude user objects from the Claude Enterprise inventory and reports each one that matches its rule as a violation.

How severe is a violation of the Claude user is not member of Entra ID policy?

Violations of the Claude user is not member of Entra ID policy have Medium severity. The policy is in the Security category.

Which module includes the Claude user is not member of Entra ID policy?

The Claude user is not member of Entra ID policy comes with the Claude Enterprise connector (in preview) in the AI & Agents module of Rencore Governance, an add-on module on the Premium and Enterprise Plans.

Was this page helpful?