Microsoft Teams: External presenters can access production controls for Teams events
🚨 The Signal: External presenters can now control Teams event production, including federated and guest users. This expands collaboration but requires careful access management to prevent unauthorized content control during live events.
The Impact
External users can now manage live event content, posing a risk of unauthorized or inappropriate content being broadcast if not properly controlled.
- Security Teams: Risk of unauthorized content broadcast by external users.
- Admins: New configuration required for external presenter permissions.
- Event Organizers: Must verify external presenter trustworthiness and roles.
- Compliance Teams: Review policies for external access to production tools.
The Action
- Review existing Teams external access policies for event capabilities.
- Define clear roles and responsibilities for external event presenters.
- Implement a 'least privilege' approach for external presenter access.
- Communicate new external presenter capabilities to event organizers.
- Monitor event logs for external presenter actions during live events.
Domain: Teams · Impact: medium · Workload: Teams