What the Engine publishes
Generated from the Engine's capability manifest at 1.0.0b10@0c269e9d29d0. No value on this panel is maintained by this site.
- Answers
- which guest accounts each enumerated site has met, by object id and never by name
- Collector
- PnP PowerShell · mode
SiteGuestsAll - Reads
Get-PnPTenantSiteGet-PnPUser
- Least privilege
- not established
No source settles the least privilege for this collector, so the Engine states none. An invented permission would be worse than an admitted gap, because somebody would grant it.
- Produces
sharepoint·site- Proven against a tenant
- live-validated
Rules that decide from it
No rule reads this evidence, and that is a recorded decision rather than a gap: the list of guests per site an operator enumerates, and the external access inspection is what consumes it. A threshold invented for a surface Microsoft publishes no position on would make a pass mean nothing.
Contracts it produces
Every collection writes evidence and an account of itself. The manifest publishes no narrower per-capability list, so this states what it does establish rather than guessing at more.
Source
The Engine's own definition of this collector, at the revision this page was generated from:1.0.0b10@0c269e9d29d0.
Generated from capability-manifest/1.0.0 at 1.0.0b10@0c269e9d29d0, contract 1.0.0b10. Every fact on this page is the Engine's; this site publishes it and does not maintain it.