🛡️🧑💼👈🔓⚙️Group - Multi tenant OneDrive Allowed users
What this group does 🧪
Being in this group means one thing:
“I'm trusted (or at least important enough) to sign into OneDrive using another tenant.”
That’s right. While the default policy
⚙️🪟🧑💼CP - OneDrive - Block other tenant signin says “nope, stick to your own tenant”,
this group — combined with the
⚙️🪟🧑💼🔓CP - OneDrive - Allow other tenant signin policy — says:
🧞 “Okay, fine. But only for you.”
🛠️ Group Configuration
| Setting | Value |
|---|---|
| Group name | 🛡️🧑💼👈🔓Group - Multi tenant OneDrive Allowed users |
| Group description | Users in this group are explicitly allowed to sync OneDrive accounts from other tenants. This overrides the block policy. Membership requires documented customer approval. |
| Group type | Security |
| Membership type | Assigned |
💡 SuperVision Tip
This group is manually assigned — but that doesn’t mean it has to be a mess.
SuperVision supports user management across tenants, so you can assign this group consistently via:
- dynamic views
- rule-based grouping
- and automation across environments
All while using a recognizable naming standard (🛡️, 👈, 🔓) for clear intent.
✍️ Still, make sure the customer signs off. Not just verbally — we mean actual documentation.
🎯 Purpose
Used as an exception mechanism for users in:
- Mergers & acquisitions (👔📈)
- Multi-tenant collaboration environments (🌐)
- Situations where “just block everything” doesn't quite work
This group is assigned to users who need access — not just want access.
⚠️ Governance matters
If you add someone to this group:
- You should know why
- The customer should know why
- And you should have a signed piece of paper somewhere that proves it
If you can’t explain who’s in this group during an audit... maybe don’t add them in the first place.
🔗 Related Policies
🕷️ With great tenant access comes great compliance risk.