External users invited 3 month ago with pending acceptance

What it detects

Shows external users invited more than 3 month ago that have not accepted invitation to the tenant.

Why it matters

Pending invitations that remain unaccepted for months create security vulnerabilities and administrative clutter while indicating the collaboration may no longer be necessary. Review all invitations older than three months and remove them through Rencore Governance automation, implementing a policy that automatically removes unaccepted invitations after a defined period to maintain security and reduce unnecessary external access points.

The rule

Every User where Is External is true and Created is more than 3 months ago and External User State equals 'PendingAcceptance'

In Rencore Governance

Details

Related policies

Other policies that check User objects:

• Copilot adoption opportunity - E3/E5 users (Medium)
• Copilot license assigned to disabled account (High)
• Inactive Copilot users - 30 days (Medium)
• Excessive draft agent creation pattern (Medium)
• External users (Information)
• External users with pending acceptance (Low)
• Users with Power Platform Premium license (Information)
• Users with E3 license not using Outlook in last 12 month (Low)
• Users with passwords not changed in last 6 months (Medium)
• Disabled user accounts (Medium)
• Admin accounts with an Office 365 E3 license assigned (Medium)
• Administrators without MFA (High)
• Disabled user accounts with assigned licenses (High)
• Global administrators without MFA (High)
• Guest users with a Dynamics license assigned (Medium)
• Inactive external users (Medium)
• Inactive internal users (Medium)
• Over-licensed user accounts (High)
• Users who are creating Microsoft Loop Teams components (Medium)