assets_guardian.plugins.microsoft365.matrix๏ƒ

Classes

Microsoft365GroupProjectAccessRule(**kwargs)

Verifies that Microsoft365 group memberships are authorized by the matrix.
class assets_guardian.plugins.microsoft365.matrix.Microsoft365GroupProjectAccessRule(**kwargs: Any)[source]๏ƒ

Bases: IMatrixRule

Verifies that Microsoft365 group memberships are authorized by the matrix.

Retrieves the rule configuration from YAML.

evaluate(accesses: Iterable[Access], matrix: dict[tuple[str, str], str], profiles: dict[tuple[str | None, str | None], list[str]]) → Iterable[Finding][source]๏ƒ

Verifies Microsoft365 group memberships against the authorization matrix.

Parameters:

  • accesses โ€“ List of accesses to evaluate.

  • matrix โ€“ Authorization matrix (profile, resource) -> role.

  • profiles โ€“ Dictionary of profiles associated with each user by their (email, username).

Yields:

Finding โ€“ Anomalies for each detected unauthorized group membership.

property description: str๏ƒ

Description of the rule.

property name: str๏ƒ

Name of the rule.

property rule_category: RuleCategory๏ƒ

MATRIX (matrix rules).

Type:

Rule category

property severity: SeverityType๏ƒ

Severity level of the rule.

property target_entity: str๏ƒ

Entity targeted by the rule.