groups

What the Engine publishes

Generated from the Engine's capability manifest at 1.0.0b10@0c269e9d29d0. No value on this panel is maintained by this site.

Answers

the Microsoft 365 groups in the directory, and how many owners and members each has, by kind and never by name

Collector

Microsoft Graph · mode Groups

Reads

• GET /v1.0/groups ($filter to Microsoft 365 groups)
• GET /v1.0/groups/{id}/owners ($select=id)
• GET /v1.0/groups/{id}/members ($select=id)

Least privilege

• GroupMember.Read.All

Produces

entra ·tenant

Proven against a tenant

live-validated

Rules that decide from it

No rule reads this evidence, and that is a recorded decision rather than a gap: the group list an operator enumerates, and the ownership inspection is what consumes it. A threshold invented for a surface Microsoft publishes no position on would make a pass mean nothing.

Contracts it produces

• collection 1.0.0
• collection 2.0.0
• evidence 1.2.0
• evidence 2.0.0
• evidence 3.0.0
• evidence 3.1.0

Every collection writes evidence and an account of itself. The manifest publishes no narrower per-capability list, so this states what it does establish rather than guessing at more.