Third-Party Risk Summary — Vendor with Elevated Access
The prompt
I am reviewing the security risk associated with vendor [VENDOR NAME], who has been granted [TYPE OF ACCESS — e.g. "guest access to SharePoint", "Entra B2B access", "Global Admin role"]. In Microsoft Entra ID, provide: 1. All guest accounts associated with this vendor's domain ([VENDOR DOMAIN]) 2. Roles or group memberships assigned to these accounts 3. Last sign-in date for each guest account 4. Any conditional access policies applied to these accounts 5. Any security alerts or risk events associated with these accounts in the last 90 days Return as a third-party access report. Flag any account with privileged access or no recent sign-in activity.
How to use it
- 1Select Copy the prompt above.
- 2Paste it into Microsoft 365 Copilot.
- 3Replace anything in brackets with your own detail, then send it.
Copilot gathers and drafts. You verify and decide. Check every figure, name and date against the system it came from before you act on it.
Written for
Security Manager, Procurement Security, CISO
More for Microsoft Copilot for Security
- First Look — Incident Summary
- Alert Triage — Is This a True Positive?
- Multi-Alert Correlation — Single Incident Thread
- Device Investigation — Rapid Scope
From the source collection in awesome-microsoft-copilot-prompts, licensed CC BY-SA 4.0.