Your group estate is not governed. It is just synced.
Most Microsoft Entra tenants look mature at the policy layer, but far fewer can clearly explain which system is actually authoritative for their groups. This article explores why Group Source of Authority is not just a sync setting, but a governance control question that shapes ownership, lifecycle, access review enforcement and real identity assurance.
