Description:

Verifies that users are restricted from inviting guests.

Why:

By only allowing an authorized group of individuals to invite external users to create accounts in the tenant, an agency can enforce a guest user account approval process, reducing the risk of unauthorized account creation.

Configured: Users are restricted from inviting guests.

Not Configured: Users are not restricted from inviting guests.

Scoring: Contributes up to 1 point to the Posture Recommendations score.

Category: Identity

Microsoft Licensing: Works with Basic licensing

Remediation in Augmentt: Configure directly in Augmentt (Configure tab)

Compliance Frameworks:

  • CISA SCuBA — MS.AAD.8.2

  • CIS Microsoft 365 Benchmark v6 (Level 2) — 5.1.6.3

  • CIS Microsoft 365 Benchmark v7 (Level 2) — 5.1.6.3

Microsoft documentation: