i have restricted the guest user from being able to add other guests to groups. But they can easily add what to do

Question

i have restricted the guest user from being able to add other guests to groups. But they can easily add what to do

Answer 1

Hello Aakash ,

Can you provide more details as what steps did you take top restrict the user ?

To prevent guest users from adding other guests to groups in Azure Active Directory (Azure AD), you can adjust the Guest user access restrictions settings. Here's how:

Access External Collaboration Settings:

• Sign in to the Microsoft Entra admin center with at least User administrator privileges.
  • Navigate to Identity > External Identities > External collaboration settings.
  Configure Guest User Access:

  - Under **Guest user access**, select **Guest user access is restricted to properties and memberships of their own directory objects**.
  
     - Click **Save**.
  

This setting ensures that guest users can only view and manage their own profile information and memberships, preventing them from adding other guests to groups. Changes may take up to 15 minutes to take effect. citeturn0search0

For more detailed information, refer to Microsoft's documentation on restricting guest user permissions.

By implementing these restrictions, you can enhance the security of your Azure AD environment and control guest user activities more effectively.

Please provide us more details on what steps you have performed if this didn't resolve your issue .
Also don't forget to accept the answer if this was helpful .