Guardz

This is an Operational Notice regarding the Guardz cloud application scopes for Google &amp; Microsoft.  As of August 8th, Guardz released updated applications that require several new permissions.  You will need to log in to the platform and take action to grant the new scopes.

Read-Only Access: All the scopes (permissions) being requested are read-only and Guardz adheres to the principles of least privilege.

Backward Compatibility: The system is backward compatible and will continue working with the current permission grants. Eventually, we will require the new application to be authorized.

More Robust by Design: While many requested permissions may seem familiar from your initial onboarding, this is a shift from user-based permissions to application-level scopes, which enables continuous monitoring of your environment without interruption.

New Features (available after permission grants)

- Mailbox Rules: Guardz now scans all mailbox rules &amp; filters to identify suspicious forwarding addresses or configurations that may indicate account compromise. 
- Inactive Users: Guardz expanded its coverage of Microsoft 365 to identify inactive users/accounts that could be vulnerable to account compromise.

1. Read-Only Access: All the scopes (permissions) being requested are read-only and Guardz adheres to the principles of least privilege.
2. Backward Compatibility: The system is backward compatible and will continue working with the current permission grants. Eventually, we will require the new application to be authorized.
3. More Robust by Design: While many requested permissions may seem familiar from your initial onboarding, this is a shift from user-based permissions to application-level scopes, which enables continuous monitoring of your environment without interruption.
4. New Features (available after permission grants)
 - Mailbox Rules: Guardz now scans all mailbox rules &amp; filters to identify suspicious forwarding addresses or configurations that may indicate account compromise. 
 - Inactive Users: Guardz expanded its coverage of Microsoft 365 to identify inactive users/accounts that could be vulnerable to account compromise.

You will see an “Action Required” notification appear in the top banner on the single org pages as well as the MSP customers page.  Click “Action Required” to grant the updated application scopes and get the latest performance &amp; functionality. 