# (L2) Ensure only organizers and co-organizers can present

The presenter role controls who can share their screen or content in a meeting.

Source: https://maester.dev/docs/tests/CIS.M365.8.5.6

<!-- This file is generated by website/scripts/generate-test-docs.mjs. Do not edit manually. -->

<div class="test-byline"><div class="test-byline-avatars"><a class="test-byline-avatar test-byline-avatar--author" href="/contributors/jeremyfinney-lgtm" title="jeremy finney · Original author"><img src="https://github.com/JeremyFinney-lgtm.png" alt="jeremy finney" width="28" height="28" loading="lazy" decoding="async" /></a></div><div class="test-byline-meta"><span class="test-byline-text">Contributed by <a href="/contributors/jeremyfinney-lgtm">jeremy finney</a></span><a class="test-byline-link" href="/contributors">All contributors →</a></div></div>

<p class="test-part">Part of <a href="/docs/tests/cis">CIS</a> · Teams · Meetings · <a href="/docs/tests">All checks</a></p>

```powershell title="Run this check"
Invoke-Maester -TestId CIS.M365.8.5.6
```

## Overview

The presenter role controls who can share their screen or content in a meeting. If every participant can take over the presenter role, anyone who joins can share content with the whole meeting, including malicious files, links and screens that show confidential information.

Limiting the presenter role to organizers and co-organizers keeps control of shared content with the people who run the meeting. Everyone else joins as an attendee. The policy sets the default for new meetings, and an organizer can still change who can present in the meeting options of a particular meeting.

#### Remediation action

1. Sign in to the [Microsoft Teams admin center](https://admin.teams.microsoft.com).
2. Go to **Meetings** > **Meeting policies**.
3. Open the **Global (Org-wide default)** policy.
4. Under **Who can present**, select **Only organizers and co-organizers**.
5. Select **Save**.

##### PowerShell

1. Connect to Teams PowerShell using `Connect-MicrosoftTeams`.
2. Run the following command:

```powershell
Set-CsTeamsMeetingPolicy -Identity Global -DesignatedPresenterRoleMode OrganizerOnlyUserOverride
```

#### Related links

* [Microsoft Teams admin center](https://admin.teams.microsoft.com)
* [Manage meeting policies in Microsoft Teams](https://learn.microsoft.com/microsoftteams/meeting-policies-in-teams)
* [Set-CsTeamsMeetingPolicy](https://learn.microsoft.com/powershell/module/teams/set-csteamsmeetingpolicy)
* [CIS Microsoft 365 Foundations Benchmark v7.0.0 - 8.5.6](https://www.cisecurity.org/benchmark/microsoft_365)

## Details

<details>
<summary>Every attribute of this check</summary>

| Field | Value |
| --- | --- |
| Test ID | CIS.M365.8.5.6 |
| Severity | Low |
| Suite | CIS |
| Product | Teams |
| Feature | Meetings |
| Area | Email and collaboration protection |
| Resource type | Tenant |
| User impact | Medium |
| Implementation cost | Low |
| MITRE ATT&CK | T1566.003 Spearphishing via Service |
| Supports benchmark | CIS Microsoft 365 Foundations Benchmark (version 7.0.0), requirement 8.5.6 |
| Benchmark level | L2 |
| Benchmark profiles | E3 Level 2 |
| Supports controls | cis-m365:8.5.6, nist-800-53-r5:AC-3 |
| PowerShell test | [Test-MtCisTeamsPresenterRole](https://github.com/maester365/maester/blob/main/tests/cis/Test.CIS.M365.8.5.6.ps1) |
| Services | Teams |

</details>

## Source

- Test: [`tests/cis/Test.CIS.M365.8.5.6.ps1`](https://github.com/maester365/maester/blob/main/tests/cis/Test.CIS.M365.8.5.6.ps1)
- Documentation: [`tests/cis/Test.CIS.M365.8.5.6.md`](https://github.com/maester365/maester/blob/main/tests/cis/Test.CIS.M365.8.5.6.md)