maester
maester copied to clipboard
EIDSCA.CP01: Default Settings - Consent Policy Settings - Group owner consent for apps accessing data
Settings to control group owner RSC permission consent have moved. They are no longer managed via Update-MgDirectorySetting
See this link and cmds to disable group owners from consenting to RSC permissions.
https://learn.microsoft.com/en-us/microsoftteams/platform/graph-api/rsc/grant-resource-specific-consent#configure-consent-settings
Set-MgBetaTeamRscConfiguration -State DisabledForAllApps Set-MgBetaChatRscConfiguration -State DisabledForAllApps Update-MgBetaTeamworkTeamAppSetting -IsUserPersonalScopeResourceSpecificConsentEnabled:$false
As well impacts https://github.com/maester365/maester/blob/main/powershell/public/CISA/Entra/Test-MtCisaAppGroupOwnerConsent.ps1