Forum Discussion
Guest Inviter role - unexpected permissions
I added a user to the Guest Inviter role and was surprised to find out that they could also create Groups which is not what I was expecting. The docs state that this should not happen, https://docs.m...
Hi Dean,
It is sad to see that this is still the case. There should be a dedicated UI for guest inviters. The role does still contain too many permissions.
-Thomas
JJ Streicher-Bremer (PFEAAS)
Microsoft
MicrosoftThomasStensitzki-MVP I just verified this in my lab and when I have the AAD group settings to _not_ allow users to create security or M365 groups, the guest inviter role does _not_ provide that access.
I wonder if you could check your tenant settings under groups...general and verify that the sliders are set to "No" for both security and M365 group creation by users.
Thanks!
JJ (MSFT employee)
