Microsoft 365 Groups and Teams With No Owners or Members rule

Rule description

This rule queries Microsoft 365 Groups and Teams according to the specified query criteria and then returns the Groups and Teams that have either no owners, or all owners are disabled, or all members are disabled.

When to use this rule

Note: A Microsoft 365 connection account is always excluded from the owners list for any validation.

Use this rule to get a list of Microsoft 365 Groups and Teams that have either no owners or all owners are disabled, or all members are disabled. You can use this report to build an inventory of your Microsoft 365 environment and analyze it for possible optimization and restructuring.

Rule Settings

Query Section

Setting name	Description
Limit scope to this Azure AD Administrative Unit	You can select Azure AD Administrative Unit to limit the Web Query scope.
Query criteria	Query criteria are sent to the target platform with other query parameters to reduce the number of returned objects and may improve query performance. Tip: For different samples on the criteria builder, see KB20180410-1.
Statistics properties to display	Specify statistics properties to display for each object in the rule scope.
Other Query Settings
Properties to display	To display additional properties for each object found by the query, add those properties to the list.
System properties	List of properties required for this rule to be executed correctly.
Post-query filter	To hide unwanted data based on criteria, not supported by the target system in the query criteria, set the filtering conditions here. Tip: For optimal performance, use the Query criteria above to filter objects whenever possible.
Sort by	Sort result object list.
Limit result set	The maximum number of Teams returned from Office 365. The default value is taken from the Maximum returned results setting on HOME > CONFIGURATION > Microsoft Office 365 settings.
MS Graph query condition (OData)	By default, Query Criteria are used. But when the OData filter is specified, it overrides the Query Criteria setting. For examples please see this article: How to use Query Builder dialog for Query Criteria and Filter rule settings – Cayosoft Help Center.
Initialization script	Usually, rules use query criteria to limit the query search scope. It improves the performance of the executed rule. Due to PowerShell limitations, it is not possible to use calculated expressions in query criteria. That is the point where the initialization script can help. You can initialize a global variable in this setting and then use it in query criteria. Important: To use a variable, declared in the initialization script, in the query scope, it must be global: $global:<variable name>.
MS Graph advanced queries	Enables consistency level eventually which uses an index that might not be up-to-date with recent changes to the object.

Output Section

This section defines the output format of this rule.

To get more information about this section, please see the Output section article.

Enforce/Schedule section

This section defines the schedule for how often to run the rule.

To get more information about this section, please see the Enforce/Schedule section article.

Change History

Version	Notes
8.2.0	The rule is renamed and updated to include Microsoft 365 Groups and Teams. MS Graph advanced queries setting is added.
6.0.0	The rule was introduced in the product.

Articles in this section