...
- Answer: Until user responds to CIT's emailed instructions, including creating their password for this new GuestID, the object is not fully provisioned, which includes it being added as a member of the AS-Guest AD group.
- Details: This action in turn adds them to the following groups:
- OIT-IDM-guests-gs
- OIT-IDM-guests-ls (a nested group)
- And presumably also subsequently removes them from these groups:
- Domain Users
- O365-LicenseExchange (a nested group)
- Users (a nested group)
- Details: This action in turn adds them to the following groups:
...