External users in Claude organization
AI summary
Rencore Governance detects external users (contractors, vendors, partners) with Claude access based on guest status in your corporate directory. Review these users quarterly to verify each has business justification, and remove access immediately when engagements end, since their access may persist and cannot be monitored through standard controls.
What it detects
Detects users flagged as external in the corporate directory who have Claude access.
Why it matters
External usersExternal userAn external user is an account whose home tenant belongs to another organization, invited into your tenant to work with you.Read more (contractors, vendors, partners) in Claude organizations require heightened oversight as they operate outside standard corporate identity governance. Their access may persist after contract termination, and their usage cannot be monitored through standard internal controls. Review external user access quarterly, ensure each has a documented business justification, and remove access immediately when the engagement ends.
The rule
Every Claude User where M365 User is guest is true
In Rencore Governance
Details
| Applies to | Claude user |
|---|---|
| Connector | Claude Enterprise |
| Severity | Medium |
| Category | Security |
| Recommended | Yes |
| Recommended automation | None |
| License type | Standard |
Related policies
Other policies that check Claude user objects:
Frequently asked questions
What does the external users in Claude organization policy detect?
What does the external users in Claude organization policy detect?The External users in Claude organization policy detects users flagged as external in the corporate directory who have Claude access.
Which objects does the external users in Claude organization policy check?
Which objects does the external users in Claude organization policy check?The External users in Claude organization policy checks Claude user objects from the Claude Enterprise inventory and reports each one that matches its rule as a violation.
How severe is a violation of the external users in Claude organization policy?
How severe is a violation of the external users in Claude organization policy?Violations of the External users in Claude organization policy have Medium severity. The policy is in the Security category.
Which module includes the external users in Claude organization policy?
Which module includes the external users in Claude organization policy?The External users in Claude organization policy comes with the Claude Enterprise connector (in preview) in the AI & Agents module of Rencore Governance, an add-on module on the Premium and Enterprise Plans.
Was this page helpful?
Thanks for the feedback.
Thanks. What was wrong?