Remediation
From Azure Portal
- In the Azure portal, open the portal menu.
- Select
Microsoft Entra ID. - Under
Manage, selectExternal Identities. - Select
External collaboration settings. - Under
Guest invite settings, setGuest invite restrictionsto eitherOnly users assigned to specific admin roles can invite guest usersorNo one in the organization [...]. - Click
Save.
From PowerShell
Enter the following:
Connect-MgGraph
Update-MgPolicyAuthorizationPolicy -AllowInvitesFrom "adminsAndGuestInviters"
Alternatively, to set this to the most restrictive No one in the organization [...] enter the following:
Connect-MgGraph
Update-MgPolicyAuthorizationPolicy -AllowInvitesFrom "none"