EIDSCA-AP07: EIDSCA AP07: Default Authorization Settings - Guest user access
- Platform
- Entra ID / M365
- Category
- EIDSCA Baseline
- Severity
- High
- Zero Trust pillar
- Identity (weight 2)
- Golden fixtures
- 3
- Branch coverage
- Observed: fixtures prove the verdicts they exercise
- Provenance
- baseline
What it checks
Entra ID security-configuration control (EIDSCA AP07): evaluates 'guestUserRoleId' on the Entra ID authorization policy against the recommended secure value.
Recommended value
eq 2af84b1e-32c8-42b7-82bc-daa82404023b
Remediation
Configure the Entra ID authorization policy so 'guestUserRoleId' is set to 2af84b1e-32c8-42b7-82bc-daa82404023b. (Entra ID security-configuration baseline, control EIDSCA AP07.)
Fixture-proven verdicts
Every verdict below is proven by a golden fixture in the module's gating test suite. This table derives from the last green run; it cannot be edited by hand.
| Scenario | Expected verdict |
|---|---|
| fail | FAIL |
| no-data | Not Assessed |
| pass | PASS |
Framework mappings
- EIDSCA
- AP07