How can I prevent external invited users (Guests) from RBAC assignments?

Question

How can I prevent external invited users (Guests) from RBAC assignments?

Fausto Pichardo 0

I have a security need to govern role assignments. In my use case, I need to prevent RBAC assignments to guest/external users in my tenant. My initial thought is to use Azure Policy, but after countless hours of editing custom code and seeking Microsoft assistance, I am no closer to a workable solution. Thanks in advance

Shweta Mathur 30,456 Reputation points Microsoft Employee Moderator

2023-04-28T03:34:24.05+00:00

Hi @Fausto Pichardo ,

Just checking in to see if the below answer helped. If this answers your query, please don’t forget to click "Accept Answer" which might be beneficial to other community members reading this thread. And, if you have any further query do let us know.

1 answer

Your answer

Shweta Mathur 30,456 Reputation points Microsoft Employee Moderator

2023-04-28T03:34:24.05+00:00

Hi @Fausto Pichardo ,

Just checking in to see if the below answer helped. If this answers your query, please don’t forget to click "Accept Answer" which might be beneficial to other community members reading this thread. And, if you have any further query do let us know.

Answer 1

Givary-MSFT 35,786 Microsoft Employee Moderator

@Fausto Pichardo Thank you for reaching out to us, As I understand you want to prevent guest accounts from showing up or list of guest accounts should not show up while performing RBAC, is my understanding is correct ? Also please me with the case number which you worked with us on this issue to understand what all steps have been taken.
User's image

User's image

Givary-MSFT 35,786 Reputation points Microsoft Employee Moderator

2023-04-19T04:20:32.5966667+00:00

@Fausto Pichardo Assuming the above ask is correct, researched on it, seems there is no straight forward approach to achieve this ask (stop list guest accounts in the RBAC section), if you can help me with the case number i can check more on this, looking forward to hear from you.

Share via

How can I prevent external invited users (Guests) from RBAC assignments?

1 answer

Your answer