Teams guest access review checklist

Overview

Stale guest accounts increase data leak risk. Quarterly review is a lightweight control executives understand.

Review steps

1. Export Azure AD > External Identities > Guests with last sign-in.
2. Map guests to owning team and business sponsor.
3. Remove guests with no activity in 180 days unless contractually required.
4. Verify Teams guest settings align with org policy (calling, meeting, channel creation).

Hardening

• Restrict who can invite guests.
• Apply Entra Access Reviews for automated recurrence with manager approval.

Documentation

Save CSV snapshots for auditors; ticket removals with reasons.