Microsoft
Microsoft
MicrosoftThis is now in public preview
It seems to be broken. Attempts to send an invitation just return an immediate error:
Failed to send invitation request
Failed to send governance invitation.
MicrosoftHey Jordan,
Have you enabled governance invitations in Microsoft Entra Admin Center for the MSSP tenant (Home tenant)?
By default, this option is disabled to eliminate the risk of actors spamming tenants with invitations.
More info here:
Configure delegated access with governance relationships for multitenant organizations - Unified security operations | Microsoft Learn
Nope I had not. It looks like that was missing. But there seems to be a bug in the template creation flow. The list of groups to select from when creating a template is empty and nothing comes up when searching.
Okay it looks like the search is very picky or buggy and the group has to be role assignable, which is pretty short-sighted.
And after all that, accepting the request in the governed tenant, which has no options, gives a useless error:
Failed to process request
Failed to create GDAP group role assignments
