How do you configure Microsoft 365 to meet the security requirements?

Written by John Gruber Published on Last Updated on

Your organization has a Microsoft 365 tenant. User accounts are synced from your organization's human resources system to Azure AD.

Your organization has five departments that each have their own Microsoft SharePoint Online site. Every user must be granted access to their own department's site. No users should be able to access a site that is not their own respective department's site.

Your manager has asked you to configure the security of the SharePoint sites. He's given you the following requirements:

• Users should be automatically added to the security group corresponding to their department.
• All group owners must verify their group membership only contains their department's users once a month.

How do you configure Microsoft 365 to meet the security requirements?