How can I prevent external invited users (Guests) from RBAC assignments?

Fausto Pichardo 0

I have a security need to govern role assignments. In my use case, I need to prevent RBAC assignments to guest/external users in my tenant. My initial thought is to use Azure Policy, but after countless hours of editing custom code and seeking Microsoft assistance, I am no closer to a workable solution. Thanks in advance

Shweta Mathur 30,101 Reputation points Microsoft Employee

2023-04-28T03:34:24.05+00:00

Hi @Fausto Pichardo ,

Just checking in to see if the below answer helped. If this answers your query, please don’t forget to click "Accept Answer" which might be beneficial to other community members reading this thread. And, if you have any further query do let us know.

1 answer

Givary-MSFT 34,286 Reputation points Microsoft Employee

2023-04-13T06:17:40.23+00:00

@Fausto Pichardo Thank you for reaching out to us, As I understand you want to prevent guest accounts from showing up or list of guest accounts should not show up while performing RBAC, is my understanding is correct ? Also please me with the case number which you worked with us on this issue to understand what all steps have been taken.
Please sign in to rate this answer.
Givary-MSFT 34,286 Reputation points Microsoft Employee

2023-04-19T04:20:32.5966667+00:00

@Fausto Pichardo Assuming the above ask is correct, researched on it, seems there is no straight forward approach to achieve this ask (stop list guest accounts in the RBAC section), if you can help me with the case number i can check more on this, looking forward to hear from you.
Sign in to comment

Use comments to ask for clarification, additional information, or improvements to the question.

Share via

How can I prevent external invited users (Guests) from RBAC assignments?

1 answer

Your answer