Set guest access to be reviewed every 30 days & Grant a user the ability to invite guests to the Microsoft 365 tenant

Written by John Gruber Published on Last Updated on

Your manager has asked you to configure the following in Microsoft 365.

Set guest access to be reviewed every 30 days.
Grant John Gruber the ability to invite guests to the Microsoft 365 tenant.

Your organization adheres to the principle of least privilege.

What should you do?

Grant John Gruber the global admin role.

Grant John Gruber the Guest inviter role.

In Azure Active Directory admin center modify the external collaboration settings.

Create an access review policy.

Click to show answer

To configure guest access review you must create an access review policy.

https://www.gitbit.org/course/ms-500/learn/Automating-Access-Review-in-Microsoft-365-rK48f6iM2

Assigning the Guest invited role to John Gruber will give him the ability to invite guests. Global admins can also invite guests but that would give John Gruber way too many permissions.

https://www.gitbit.org/course/ms-500/learn/Creating-and-managing-admins-through-roles-7CpqFkPZU

https://docs.microsoft.com/en-us/microsoft-365/solutions/create-secure-guest-sharing-environment?view=o365-worldwide#set-up-guest-access-reviews

< Previous Next > Skip Exam >>