Query: activedirectory_external_guest_user_with_owner_role_count

select
  count(distinct u.display_name) as value,
  'External Guest Users With Owner Role' as label,
  case when count(*) = 0 then 'ok' else 'alert' end as type
  from
    azuread_user as u
    left join azure_role_assignment as a on a.principal_id = u.id
    left join azure_role_definition as d on d.id = a.role_definition_id
  where d.role_name = 'Owner'
    and (u.user_principal_name like '%EXT%' or user_type = 'Guest' );