Allow / Block guest access to groups changed required permissions?

[Henrik Nordtorp]

We are following this guide:

https://docs.microsoft.com/en-us/exchange/recipients-in-exchange-online/manage-group-access-to-offic...

To disable guest access to pure internal groups like departments - but sometime last week the permissions required to do so has changed - now it looks like Global Admin is required which MUST be a BUG?

[#2]

The AAD policy cmdlets have always required GA permissions, afaik.

[#3]

Yep. You can't configure the Groups policy without being a tenant admin.

But is this the question? What exactly is happening?