EIDSCA.ST08 - Default Settings - Classification and M365 Groups - M365 groups - Allow Guests to become Group Owner.

Overview

Indicating whether or not a guest user can be an owner of groups, manage

CISA SCuBA 2.18: Guest users SHOULD have limited access to Entra ID (Azure AD) directory objects

Test script

https://graph.microsoft.com/beta/settings
.values -eq 'false'

Related links

• Open in Graph Explorer
• directorySetting resource type - Microsoft Graph beta | Microsoft Learn

Test Metadata

Field	Value
Test ID	EIDSCA.ST08
Severity	Medium
Suite	Entra ID SCA
Category	General
PowerShell test	Test-MtEidscaST08
Tags	EIDSCA, EIDSCA.ST08

Source

• Pester test: tests/EIDSCA/Test-EIDSCA.Generated.Tests.ps1
• PowerShell source: powershell/internal/eidsca/Test-MtEidscaST08.ps1