Teams with inactive external users
AI summary
External members who have not signed in for more than six months have likely completed their work with you but can still access your team's conversations and files, creating a security risk if misused. Identify these inactive external users in your teams and remove them; also consider Microsoft Entra access reviews for inactive guests.
What it detects
Shows teams with external membersExternal userAn external user is an account whose home tenant belongs to another organization, invited into your tenant to work with you.Read more that have not logged in for more than 6 month.
Why it matters
External users who have not signed in for six months have most likely finished their work with you, but they can still open the team's conversations and files. Nobody would notice if such an account were misused. Remove them from the team, and consider Microsoft Entra access reviewsAccess reviewAn access review is a report in the deprecated Access feature that shows who has access to content, for owners to approve.Read more for inactive guests.
The rule
Every Team that has any Teams Members where Is External is true and Last Sign-In is not default and Last Sign-In is more than 6 months ago and External User State not like 'PendingAcceptance'
In Rencore Governance
Details
| Applies to | Team |
|---|---|
| Connector | Teams |
| Severity | Information |
| Category | External Access |
| Recommended | No |
| Recommended automation | None |
| License type | Standard |
Related policies
Other policies that check Team objects:
- Teams with a disabled owner account (Medium)
- Teams with private channels (Information)
- Teams with many channels (Information)
- Teams that use forbidden/misleading words in display name (Low)
- Teams with only disabled owner accounts (Medium)
- Teams that reach the 200 channel limit (Medium)
- Teams with very few owners (High)
- Teams with very few users (Medium)
- Teams with many users (High)
- Teams that reach the 100 owner limit (Medium)
- Inactive teams (Medium)
- New Teams (Information)
- Public Teams (Information)
- Team contains Copilot agent and external members (High)
- Teams with external users (Low)
- Teams with less than 2 owners (Medium)
- Teams with many owners (Low)
- Teams without owners (Medium)
- Teams that use prohibited words in the name or description (High)
Frequently asked questions
What does the Teams with inactive external users policy detect?
What does the Teams with inactive external users policy detect?The Teams with inactive external users policy shows teams with external members that have not logged in for more than 6 months.
Which objects does the Teams with inactive external users policy check?
Which objects does the Teams with inactive external users policy check?The Teams with inactive external users policy checks Team objects from the Teams inventory and reports each one that matches its rule as a violation.
How severe is a violation of the Teams with inactive external users policy?
How severe is a violation of the Teams with inactive external users policy?Violations of the Teams with inactive external users policy have Information severity. The policy is in the External Access category.
Which module includes the Teams with inactive external users policy?
Which module includes the Teams with inactive external users policy?The Teams with inactive external users policy comes with the Teams connector in the Digital Workplace module of Rencore Governance, which every Plan includes.
Was this page helpful?
Thanks for the feedback.
Thanks. What was wrong?