Description:
Verifies that an active dynamic Microsoft Entra security group exists whose membership rule targets guest users, so guests can be addressed consistently by Conditional Access policies, access reviews and licence assignments.
Why:
CIS M365 Foundations Benchmark v6 §5.1.3.1 (L1) requires a dynamic Microsoft Entra security group whose membership rule targets guest users. This lets Conditional Access policies, access reviews, license assignments, and other controls that reference the group apply automatically to current and future guests.
Configured: An active dynamic group for guest users exists.
Not Configured: No active dynamic group for guest users was found.
Scoring: Contributes up to 1 point to the Posture Recommendations score.
Category: Identity
Microsoft Licensing: Requires Premium (P1) licensing
Remediation in Augmentt: Configure directly in Augmentt (Configure tab); Guided remediation steps (Instructions tab)
Compliance Frameworks:
CIS Microsoft 365 Benchmark v6 (Level 1) — 5.1.3.1
CIS Controls v8 — 3.3
Microsoft documentation: