LowScript packFree

User Attributes

Checks that Microsoft Entra users have the attributes HR processes, dynamic groups and licensing depend on, that those values are formatted consistently, and that they use your approved values and office locations.

Version
0.5.0
Tests
26
Connectors
0
Published
5 Nov 2026

DevClate · devclate.user-attributes · 0 stars · Open source · MIT

PowerShell
Install-MtPack DevClate/maester-pack-ua

Install only packs from sources you trust. This pack is made by DevClate, not by Maester. The site only indexes and scans it: Install-MtPack downloads it straight from github.com/DevClate/maester-pack-ua.

maester-packs.lock.json entry
{  "Id": "devclate.user-attributes",  "Source": "DevClate/maester-pack-ua",  "Version": "0.5.0",  "Commit": "b517a31d37e07d9c9cb11bf6bf582eaec603ac4d",  "Digest": "sha256:d8b91b6f76225c01279e09ba6b104e5f32e9fdcdbd4f344bfb8d6b2bddeeef92"}

← All tests

MP.CLT.UA.1009 All guest users have a sponsor.

Severity: MediumGraph

Checks that every enabled guest user has at least one sponsor.

A sponsor is the person or group responsible for a guest: they can be asked to review the guest's access, and entitlement management notifies them about the guest. Guests without a sponsor have nobody accountable for them, so they tend to keep their access long after the project that needed it has ended.

Remediation action

  1. In the Microsoft Entra admin center, go to Entra ID > Users, filter by User type = Guest, and open each guest listed below.
  2. Select Edit properties > Job information, add the employee or group responsible for the guest under Sponsors (up to five), and save.
  3. For many guests, the Update-MsIdInvitedUserSponsorsFromInvitedBy command in the Microsoft Identity Tools module (MSIdentityTools) sets each guest's sponsor to the person who invited them.
  4. Make sponsors part of how guests arrive: when an invitation names no sponsor, the inviter becomes the sponsor.

Related links

%TestResult%