Controlling the Guest Access of a Specific Team, Including Sensitivity Labels and Microsoft Entra ID

Microsoft Entra ID, Microsoft Graph PowerShell, and sensitivity labels provide more granular control over guest access than the aforementioned methods of controlling guest access to your organization. In this section, you will explore limiting who can invite guests and limiting guest access to specific teams (groups) via PowerShell and sensitivity labels.

Exercise 4.5: Limiting Who Can Invite Guests to a Specific Team

One way of controlling guest sprawl and protecting your data and resources is to specify who can invite guests to a team. Guest inviters are typically individuals who understand the importance of data loss prevention, security, and compliance before granting access to private resources. A best practice might be the requiring training of anyone who will be able to invite guests. Each team (group) has a unique membership, so it would be important to remember that only...