Forum Discussion

Daniel Westerdale's avatar
Daniel Westerdale
Iron Contributor
Aug 29, 2019

Streamlining adding external users to our tenant and as members of a new SharePoint Online portal

Hi   I am adding a number of external users who all grouped by separate domains. From the Bulk invite AD B2B docs     foreach ($email in $invitations) {New-AzureADMSInvitation ` -Invi...
Azure AD B2B
Corsino's avatar
Corsino
Copper Contributor
Sep 27, 2019

Hi Daniel Westerdale,

 

Regarding the 1st question, I'm not a Sharepoint Expert, so I hope someone can answer that question.

 

Regarding the others, if you have the Sharepoint Group Object ID, you just need to add a line in your code:

Add-AzureADGroupMember -ObjectId $groupID -RefObjectId $userid #Adding B2B users directly to the Group
foreach ($email in $invitations) 
   {New-AzureADMSInvitation `
      -InvitedUserEmailAddress $email.InvitedUserEmailAddress `
      -InvitedUserDisplayName $email.Name `
      -InviteRedirectUrl "<a href="<a href="https://mytenant.sharepoint.com/sites/YourNewPortal" target="_blank">https://mytenant.sharepoint.com/sites/YourNewPortal</a>" target="_blank"><a href="https://mytenant.sharepoint.com/sites/YourNewPortal</a" target="_blank">https://mytenant.sharepoint.com/sites/YourNewPortal</a</a>>"`
      -InvitedUserMessageInfo $messageInfo `
      -SendInvitationMessage $true
   Add-AzureADGroupMember -ObjectId $groupID -RefObjectId $userid #Adding B2B users directly to the Group
   
   }

 

Regarding the 3rd questions, from what I know, nested groups are not supported.

However, you can use  Dynamic Groups (You need a Premium license) and assign that group to SharePoint.

 

I think this Dynamic Rule will be enough:

 

(user.userPrincipalName -match "#EXT#@DomainYouWantToAssignUsers.com")
  • Daniel Westerdale's avatar
    Daniel Westerdale
    Iron Contributor
    Sep 27, 2019

    Corsino 

     

    Very interesting answers. Thanks you, I like your approach.  I was code going to add Add-PnPUserToGroup  but i think your approach is more elegant. I did find that trying to add external user who was already on the tenant caused and exception which needed to handle 

     

    I will look at dynamic groups as it looks useful if the domain in question is "safe" . 

Resources