Groups with external users
AI summary
This rule detects Microsoft 365 groups with external members, who could access sensitive information and internal communications. You can automate periodic reviews with approval workflows to validate and manage external group membership.
What it detects
Shows groups that have external usersExternal userAn external user is an account whose home tenant belongs to another organization, invited into your tenant to work with you.Read more.
Why it matters
External members in groups may access sensitive information and internal communications, requiring careful oversight to balance collaboration needs with security requirements. External access reviewAccess reviewAn access review is a report in the deprecated Access feature that shows who has access to content, for owners to approve.Read more is crucial for maintaining the security and integrity of your organization's data. By regularly reviewing and managing external access with Rencore Governance, organizations can reduce security risks, enhance compliance and optimize costs. Automate periodic external access reviews including approval workflows to validate external group membership by the respective owner.
The rule
Every Group that has any Group Members where Is External is true
In Rencore Governance
Details
| Applies to | Group |
|---|---|
| Connector | Microsoft 365 |
| Severity | Medium |
| Category | External Access |
| Recommended | Yes |
| Recommended automation | None |
| License type | Standard |
Related policies
Other policies that check Group objects:
- Groups with disabled user accounts (Medium)
- Groups with external owners (High)
- Groups with very few owners (Medium)
Frequently asked questions
What does the groups with external users policy detect?
The Groups with external users policy shows groups that have external users.
Which objects does the groups with external users policy check?
The Groups with external users policy checks Group objects from the Microsoft 365 inventory and reports each one that matches its rule as a violation.
How severe is a violation of the groups with external users policy?
Violations of the Groups with external users policy have Medium severity. The policy is in the External Access category.
Which module includes the groups with external users policy?
The Groups with external users policy comes with the Microsoft 365 connector in the Digital Workplace module of Rencore Governance, which every Plan includes.
Was this page helpful?
Thanks for the feedback.
Thanks. What was wrong?