azuread_account_provisioning_activity_report_reviewedazuread_admin_consent_workflow_enabledazuread_admin_user_mfa_enabledazuread_all_user_mfa_enabledazuread_audit_log_search_enabledazuread_authorization_policy_accessing_company_data_not_allowedazuread_global_admin_range_restrictedazuread_group_not_publicazuread_guest_user_infoazuread_legacy_authentication_disabledazuread_microsoft_azure_management_limited_to_administrative_rolesazuread_password_protection_enabledazuread_risky_sign_ins_reportazuread_security_default_disabledazuread_signin_frequency_policyazuread_signin_risk_policyazuread_third_party_application_not_allowedazuread_user_password_not_set_to_expireazuread_user_risk_policyazuread_user_sspr_enabledmicrosoft365_calendar_sharing_disabled
Query: azuread_group_not_public
Usage
powerpipe query microsoft365_compliance.query.azuread_group_not_public
Steampipe Tables
SQL
select id as resource, case when visibility = 'Public' then 'alarm' else 'ok' end status, case when visibility = 'Public' then title || ' is public.' else title || ' is not public.' end reason , tenant_id as tenant_idfrom azuread_group;
Controls
The query is being used by the following controls:
- 1.1.12 Ensure that only organizationally managed/approved public groups exist
- 1.1.12 Ensure that only organizationally managed/approved public groups exist
- 1.1.16 Ensure that only organizationally managed/approved public groups exist
- 1.2.1 Ensure that only organizationally managed/approved public groups exist