E4Medium23 groups
Groups with no owner
Twenty-three groups grant access with nobody responsible for who is in them. An access review of an ownerless group has nobody to send it to.
Evidence
| Group | Members | Type | Created | Grants access to |
|---|---|---|---|---|
| All-Payroll-Read | 41 | Security | 11 May 2022 | Payroll file share |
| Prosjekt-Nordlys | 18 | Microsoft 365 | 03 Feb 2023 | Teams, SharePoint |
| Legacy-VPN-Users | 67 | Security | 19 Aug 2021 | VPN profile |
| Finance-Reports | 12 | Security | 27 Oct 2023 | Power BI workspace |
Showing 4 of 23 rows · full list in the export
How this was derived
group.owners.count = 0
- Groups read
- 187
- Without an owner
- 23
If closed
+1 points23 groups get a named ownerAccess reviews become deliverable
Fix
Assign a named owner to each group, and require one at creation so the list cannot grow again.
requires write access
Related findings