Users are added automatically to MS teams without any approval.

IBN 4,331 Reputation points
2022-09-28T18:00:53.117+00:00

Hello

Please i need your help on this issue.

We have this Teams channel and where we handle some sensitive data. We noted yesterday that it had 30-40 outside users added to it from external domains. We have removed these user now, but wanted to understand how they got added in the first place.

It doesn’t look like any of the owners of the Team added them.

Microsoft Teams
Microsoft Teams
A Microsoft customizable chat-based workspace.
9,067 questions
0 comments No comments
{count} votes

2 answers

Sort by: Most helpful
  1. JimmySalian-2011 41,916 Reputation points
    2022-09-28T18:46:14.923+00:00

    Hi,

    Do you have auditing enabled? You can look at audit data, you have to first turn on auditing in the Microsoft Purview compliance portal if it is not enabled to check the activities.
    Audit Portal

    compliance.microsoft.com

    Hope this helps.

    ==
    Please "Accept the answer" if the information helped you. This will help us and others in the community as well.

    0 comments No comments

  2. SokiGuo-MSFT 23,236 Reputation points Microsoft Vendor
    2022-09-29T09:06:47.65+00:00

    Hi @IBN

    All users added to the team require the consent of the team owner.

    If you're a team owner, you can add someone to a team. If you're not a team owner, you can submit a request and the team owner can then accept or deny it. By default, the method of adding

    a member refers to this article.

    There can be multiple owners in a team. You need to contact all owners to find out the situation.

    Besides, you can also get logs to troubleshoot the problem. I did a series of tests to remove invited users as follows. It is recorded in the logs.
    245938-untitled.png


    If the answer is helpful, please click "Accept Answer" and kindly upvote it. If you have extra questions about this answer, please click "Comment".
    Note: Please follow the steps in our documentation to enable e-mail notifications if you want to receive the related email notification for this thread.