CIS M365 V6 L1 - Ensure a dynamic group for guest users is created 5.1.3.1

Template family: Entra ID group
Applies to: Microsoft Entra ID
Where to find it: Secure → Entra ID → Groups → Templates → Augmentt Default

What this template is for

Creates a dynamic security group that includes guest users for CIS M365 V6 L1 5.1.3.1.

What it actually does

Setting	Value
`groupTypes`	DynamicMembership
`securityEnabled`	true
`mailEnabled`	false
`mailNickname`	CISM365V6L1DynamicGuestGroup5131
`membershipRule`	(user.userType -eq "Guest")
`membershipRuleProcessingState`	On

Anything not listed keeps the Microsoft default.

Compliance mapping

CIS Microsoft 365 Foundations Benchmark v6.0.0 — section 5.1.3.1 (L1)

This is an Augmentt Default template, shipped with the product and shared across all customers. Deploying it creates a new policy in the customer tenant; edit the deployed policy rather than the template.