Teams with external users
AI summary
External guests in Teams can read conversations and files in standard channels. These accounts often remain after projects end, and Teams may later be used for internal topics. Regularly review external members with team owners; an automation can mark teams to alert members about external access.
What it detects
Shows all TeamsMicrosoft TeamsMicrosoft Teams is the Microsoft 365 app for chat, meetings and team collaboration.Read more that have external usersExternal userAn external user is an account whose home tenant belongs to another organization, invited into your tenant to work with you.Read more/guests.
Why it matters
Guests in a team can read the conversations and files in its standard channelsChannelA channel is a section inside a Microsoft Teams team where members hold conversations and share files on one topic.Read more. That is often the point, but guests tend to stay after the project ends, and the team may later be used for internal topics. Review the guests regularly with the owners. The Mark teams with external users automation adds an indicator to the team name so members know outsiders can read along.
The rule
Every Team that has any Teams Members where Is External is true
In Rencore Governance
Details
| Applies to | Team |
|---|---|
| Connector | Teams |
| Severity | Low |
| Category | External Access |
| Recommended | Yes |
| Recommended automation | None |
| License type | Standard |
Related policies
Other policies that check Team objects:
- Teams with a disabled owner account (Medium)
- Teams with private channels (Information)
- Teams with many channels (Information)
- Teams that use forbidden/misleading words in display name (Low)
- Teams with only disabled owner accounts (Medium)
- Teams that reach the 200 channel limit (Medium)
- Teams with very few owners (High)
- Teams with very few users (Medium)
- Teams with many users (High)
- Teams that reach the 100 owner limit (Medium)
- Inactive teams (Medium)
- Teams with inactive external users (Information)
- New Teams (Information)
- Public Teams (Information)
- Team contains Copilot agent and external members (High)
- Teams with less than 2 owners (Medium)
- Teams with many owners (Low)
- Teams without owners (Medium)
- Teams that use prohibited words in the name or description (High)
Frequently asked questions
What does the Teams with external users policy detect?
What does the Teams with external users policy detect?The Teams with external users policy shows all Teams that have external users/guests.
Which objects does the Teams with external users policy check?
Which objects does the Teams with external users policy check?The Teams with external users policy checks Team objects from the Teams inventory and reports each one that matches its rule as a violation.
How severe is a violation of the Teams with external users policy?
How severe is a violation of the Teams with external users policy?Violations of the Teams with external users policy have Low severity. The policy is in the External Access category.
Which module includes the Teams with external users policy?
Which module includes the Teams with external users policy?The Teams with external users policy comes with the Teams connector in the Digital Workplace module of Rencore Governance, which every Plan includes.
Was this page helpful?
Thanks for the feedback.
Thanks. What was wrong?