Default Settings - Classification and M365 Groups - M365 groups - Allow Guests to become Group Owner
Why This Matters
Allowing guest users to become group owners in Microsoft 365 groups can lead to unauthorized control over group membership and settings. Guest users may not be subject to the same organizational policies and oversight as internal employees, increasing the risk of data exposure or inappropriate access. Administrators should restrict this capability to maintain proper governance over group resources.
What Aether365 Checks
This check verifies that the directory setting "Allow Guests to become Group Owner" is set to false for Microsoft 365 groups. The finding appears in the Aether365 dashboard under the entra-id checks section.