Maester MP.AIGOV.1021 Group an agent or tool is assigned to should exist, have two owners and a description
[!NOTE] Validated 2026-11-09 against a real Microsoft 365 test tenant, via an actual
Invoke-Maesterrun. The run correctly Passed: no agent or tool in this tenant is assigned to a group, so this is a vacuous true negative — the deleted-group, owner-count and description checks themselves weren't exercised against a real group assignment.
Checks the groups that agents and tools are assigned to (who can use or install them). Each group decides who gets the agent, so someone has to own its membership.
| Severity | Condition |
|---|---|
| Medium | An assigned group no longer exists. |
| Medium | An assigned group has fewer than MinOwnerCount owners (default 2). |
| Low | An assigned group has no description. |
Agents assigned directly to users are MP.AIGOV.1003.
Remediation action
Reassign agents from deleted groups to the right group, add at least two owners to each group, and describe each group and the agent or tool it's for.
Related links
%TestResult%
