rules/findings/m365/microsoft_teams/meetings/ms-teams-meeting-chat-not-allow-anonymous-users.json

{
  "provider": "Microsoft365",
  "serviceType": "Microsoft Teams",
  "serviceName": "Microsoft 365",
  "displayName": "Ensure meeting chat does not allow anonymous users",
  "description": "This policy setting controls who has access to read and write chat messages during a meeting.",
  "rationale": "Ensuring that only authorized individuals can read and write chat messages during a meeting reduces the risk that a malicious user can inadvertently show content that is not appropriate or view sensitive information.",
  "impact": "Only authorized individuals will be able to read and write chat messages during a meeting.",
  "remediation": {
    "text": "\r\n\t\t\t###### To remediate using the UI: \r\n\t\t\t1. Navigate to Microsoft Teams admin center https://admin.teams.microsoft.com. \r\n\t\t\t2. Click to expand Meetings select Meeting policies. \r\n\t\t\t3. Click Global (Org-wide default). \r\n\t\t\t4. Under meeting engagement set Meeting chat to On for everyone but anonymous users. \r\n\t",
    "code": {
      "powerShell": null,
      "iac": null,
      "terraform": null,
      "other": null
    }
  },
  "recommendation": null,
  "references": [
    "https://learn.microsoft.com/en-us/powershell/module/teams/set-csteamsmeetingpolicy?view=teams-ps\u0026viewFallbackFrom=skype-ps#-meetingchatenabledtype"
  ],
  "compliance": [
    {
      "name": "CIS Microsoft 365 Foundations Benchmark",
      "version": "7.0.0",
      "reference": "8.5.5",
      "profile": [
        "E3 Level 2",
        "E5 Level 2"
      ]
    }
  ],
  "level": "medium",
  "tags": [],
  "rule": {
    "path": "o365_teams_skype_meeting_policies",
    "subPath": null,
    "selectCondition": {},
    "query": [
      {
        "filter": [
          {
            "conditions": [
              [
                "Identity",
                "eq",
                "Global"
              ],
              [
                "MeetingChatEnabledType",
                "eq",
                "Enabled"
              ]
            ],
            "operator": "and"
          }
        ]
      }
    ],
    "shouldExist": null,
    "returnObject": null,
    "removeIfNotExists": null
  },
  "output": {
    "html": {
      "data": {
        "properties": {
          "identity": "Identity",
          "description": "Description",
          "meetingChatEnabledType": "Meeting Chat Enabled Type"
        },
        "expandObject": null
      },
      "table": "default",
      "decorate": [
        {
          "itemName": "Meeting Chat Enabled Type",
          "itemValue": "enabled",
          "className": "badge badge-danger badge-xl"
        }
      ],
      "emphasis": [],
      "actions": {
        "objectData": {
          "properties": [
            "*"
          ],
          "expandObject": null,
          "limit": null
        },
        "showGoToButton": "True",
        "showModalButton": "True",
        "directLink": null
      }
    },
    "text": {
      "data": {
        "properties": {},
        "expandObject": null
      },
      "status": {
        "keyName": [],
        "message": "Ensure meeting chat does not allow anonymous users",
        "defaultMessage": null
      },
      "properties": {
        "resourceName": "Description",
        "resourceId": "ConfigId",
        "resourceType": "TeamsMeetingPolicy"
      },
      "onlyStatus": false
    }
  },
  "idSuffix": "teams_meeting_chat_allow_anonymous_users",
  "notes": [],
  "categories": [],
  "immutableProperties": [
    "Description",
    "ConfigId",
    "Key.SchemaId.XName.name"
  ],
  "id": "microsoft365_2174"
}