EIDSCA.ST09 - Default Settings - Classification and M365 Groups - M365 groups - Allow Guests to have access to groups content.

Contributed by Thomas NaunheimAll contributors →

Overview

Indicating whether or not a guest user can have access to Microsoft 365 groups content. This setting does not require an Azure Active Directory Premium P1 license.

Manages if guest accounts can access resources through Microsoft 365 Group membership and could break collaboration if you disable it.

Test script

https://graph.microsoft.com/beta/settings
.values -eq 'True'

Remediation action

Microsoft Learn - Microsoft Entra cmdlets for configuring group settings

Related links

• Open in Graph Explorer
• directorySetting resource type - Microsoft Graph beta | Microsoft Learn

Test Metadata

Field	Value
Test ID	EIDSCA.ST09
Severity	Low
Suite	Entra ID SCA
Product	Entra ID
Feature	Groups
Area	External access and sharing
Resource type	Tenant
User impact	Low
Implementation cost	Low
MITRE ATT&CK	None
Supports controls	nist-800-53-r5:AC-6, nist-800-53-r5:AC-21
PowerShell test	Test-MtCheckEidscaST09
Services	Graph

Source

• Test: tests/eidsca/Test.EIDSCA.ST09.ps1
• Documentation: tests/eidsca/Test.EIDSCA.ST09.md