EIDSCA.ST08 - Default Settings - Classification and M365 Groups - M365 groups - Allow Guests to become Group Owner.
Overview
Indicating whether or not a guest user can be an owner of groups, manage
CISA SCuBA 2.18: Guest users SHOULD have limited access to Entra ID (Azure AD) directory objects
Test script
https://graph.microsoft.com/beta/settings
.values -eq 'false'
Related links
Test Metadata
| Field | Value |
|---|---|
| Test ID | EIDSCA.ST08 |
| Severity | Medium |
| Suite | Entra ID SCA |
| Category | General |
| PowerShell test | Test-MtEidscaST08 |
| Tags | EIDSCA, EIDSCA.ST08 |
Source
- Pester test:
tests/EIDSCA/Test-EIDSCA.Generated.Tests.ps1 - PowerShell source:
powershell/internal/eidsca/Test-MtEidscaST08.ps1