Guest users with a Dynamics license assigned
AI summary
Rencore Governance detects guest users with Dynamics licenses assigned, which typically indicates unnecessary over-provisioning since external users rarely need full Dynamics functionality. You should review these accounts to confirm business justification, revoke licenses where full access is not required, and implement approval workflows through Rencore Governance for future external Dynamics license assignments.
What it detects
Guest usersExternal userAn external user is an account whose home tenant belongs to another organization, invited into your tenant to work with you.Read more with a Dynamics license assigned.
Why it matters
Dynamics licenses assigned to guest users typically indicate over-provisioning since external users rarely require full Dynamics functionality, resulting in significant unnecessary costs. Review all guest accounts with Dynamics licenses to validate business justification, revoke licenses where full access isn't essential, and implement approval workflows through Rencore Governance for any future external Dynamics license assignments to control costs and maintain appropriate access levels.
The rule
Every User where User Type equals 'Guest' that has any License assignments where Name contains 'DYNAMICS'
In Rencore Governance
Details
| Applies to | User |
|---|---|
| Connector | Microsoft 365 |
| Severity | Medium |
| Category | Costs |
| Recommended | No |
| Recommended automation | None |
| License type | Standard |
Related policies
Other policies that check User objects:
- Copilot adoption opportunity - E3/E5 users (Medium)
- Copilot license assigned to disabled account (High)
- Inactive Copilot users - 30 days (Medium)
- Excessive draft agent creation pattern (Medium)
- External users (Information)
- External users with pending acceptance (Low)
- Users with Power Platform Premium license (Information)
- Users with E3 license not using Outlook in last 12 month (Low)
- Users with passwords not changed in last 6 months (Medium)
- Disabled user accounts (Medium)
- Admin accounts with an Office 365 E3 license assigned (Medium)
- Administrators without MFA (High)
- External users invited 3 month ago with pending acceptance (Low)
- Disabled user accounts with assigned licenses (High)
- Global administrators without MFA (High)
- Inactive external users (Medium)
- Inactive internal users (Medium)
- Over-licensed user accounts (High)
- Users who are creating Microsoft Loop Teams components (Medium)
Frequently asked questions
What does the guest users with a Dynamics license assigned policy detect?
Guest users with a Dynamics license assigned. The Guest users with a Dynamics license assigned policy checks User objects from the Microsoft 365 inventory and reports each match as a violation.
How severe is a violation of the guest users with a Dynamics license assigned policy?
Violations of the Guest users with a Dynamics license assigned policy have Medium severity. The policy is in the Costs category.
Which module includes the guest users with a Dynamics license assigned policy?
The Guest users with a Dynamics license assigned policy comes with the Microsoft 365 connector in the Digital Workplace module of Rencore Governance, which every Plan includes.
Was this page helpful?
Thanks for the feedback.
Thanks. What was wrong?