Microsoft Teams: Facilitator can join channel meetings

🚨 The Signal: Microsoft Teams channel meetings will allow a 'Facilitator' role to manage agendas and notes. This introduces a new privileged role within meetings, potentially increasing data exposure risk if not properly governed.

The Impact

Users with Facilitator licenses are affected, introducing a new role with elevated permissions that could lead to unauthorized information disclosure if not managed.

• Meeting Organizers: Can assign a new role, requiring understanding of its permissions.
• Facilitators: Gain elevated access to meeting content, increasing responsibility for data handling.
• Security Teams: Must assess the risk of a new privileged role and potential data exposure.
• Compliance Teams: Need to review how this role aligns with data governance and access policies.

The Action

1. Review existing Microsoft Teams meeting policies for guest access and external sharing.
2. Communicate the capabilities and responsibilities of the Facilitator role to users.
3. Monitor audit logs for Facilitator role assignments and activities in sensitive channel meetings.
4. Consider implementing sensitivity labels for channel meetings to restrict Facilitator access to highly confidential data.

Domain: Teams · Impact: medium · Workload: Teams