Team contains Copilot agent and external members
AI summary
Copilot agents in Teams with external members can expose organizational data to unauthorized people. Rencore Governance identifies these scenarios so you can review and fix the risk. You should either remove the agents or implement strict sharing policies that limit agent access.
What it detects
Detects Team where a Copilot agentCopilot Studio agentA Copilot Studio agent is an AI agent someone built in Microsoft Copilot Studio.Read more is installed and external usersExternal userAn external user is an account whose home tenant belongs to another organization, invited into your tenant to work with you.Read more are present, posing security concerns.
Why it matters
Copilot agents in TeamsMicrosoft TeamsMicrosoft Teams is the Microsoft 365 app for chat, meetings and team collaboration.Read more with external members may inadvertently expose organizational data to unauthorized individuals. Rencore Governance can flag such scenarios for review. Organizations should limit agent access to internal Teams or implement strict sharing policies.
The rule
Every Team that has any Teams Members where Is External is true and any Teams Installed App Relations where Bot Id is not empty and External Id is not empty
In Rencore Governance
Details
| Applies to | Team |
|---|---|
| Connector | Teams |
| Severity | High |
| Category | Security |
| Recommended | No |
| Recommended automation | None |
| License type | Standard |
Related policies
Other policies that check Team objects:
- Teams with a disabled owner account (Medium)
- Teams with private channels (Information)
- Teams with many channels (Information)
- Teams that use forbidden/misleading words in display name (Low)
- Teams with only disabled owner accounts (Medium)
- Teams that reach the 200 channel limit (Medium)
- Teams with very few owners (High)
- Teams with very few users (Medium)
- Teams with many users (High)
- Teams that reach the 100 owner limit (Medium)
- Inactive teams (Medium)
- Teams with inactive external users (Information)
- New Teams (Information)
- Public Teams (Information)
- Teams with external users (Low)
- Teams with less than 2 owners (Medium)
- Teams with many owners (Low)
- Teams without owners (Medium)
- Teams that use prohibited words in the name or description (High)
Frequently asked questions
What does the team contains Copilot agent and external members policy detect?
What does the team contains Copilot agent and external members policy detect?The Team contains Copilot agent and external members policy detects Team where a Copilot agent is installed and external users are present, posing security concerns.
Which objects does the team contains Copilot agent and external members policy check?
Which objects does the team contains Copilot agent and external members policy check?The Team contains Copilot agent and external members policy checks Team objects from the Teams inventory and reports each one that matches its rule as a violation.
How severe is a violation of the team contains Copilot agent and external members policy?
How severe is a violation of the team contains Copilot agent and external members policy?Violations of the Team contains Copilot agent and external members policy have High severity. The policy is in the Security category.
Which module includes the team contains Copilot agent and external members policy?
Which module includes the team contains Copilot agent and external members policy?The Team contains Copilot agent and external members policy comes with the Teams connector in the Digital Workplace module of Rencore Governance, which every Plan includes.
Was this page helpful?
Thanks for the feedback.
Thanks. What was wrong?