Forum Discussion
SPO restricting accounts to specific site document folders
I typically like to recommend using separate site collections for content that needs to be shared externally. Since external sharing is enabled on a site by site basis, this helps to make it easier to identify and manage content and permissions. It also makes it easy to share content with external users and provides them the ability to use their own accounts, so that you don't have to. This article should be helpful https://support.office.com/en-us/article/manage-external-sharing-for-your-sharepoint-online-environment-c8a462eb-0723-4b0b-8d0a-70feafe4be85
Thank you everyone for your expertise and suggestions.
To explain further the two 'internal-external' accounts are used by contracted companies on my organsisations behalf to perform organisation work but don't have O365 themselves. Giving them accounts allows them to send email via shared mailboxes in the name of the organisation, use SfB and stored documents on SPO.
Taking your combined advice I have setup O365 groups and migrated the particular folders they need to these groups. This in effect gives those accounts seperate site collections O365 group sharepoint site and those internal accounts needing to access the documentscan become a member of the O365 groups .
This leaves me with the issue of excluding the two 'internal-external' accounts from the main SPO site collection which contains confidential information to the organsisation.
Being a SPO admin newbie can someone explain the steps need to achieve this?
Many thanks to you all
Nick- Typically I would recommend putting Everyone Except External Users into the visitors group of your main site collection, but that will included the "internal" accounts for your contractors which may not be what you want. To work around this, I would recommend creating a AD group that includes all actual employee accounts and excludes the contractors. You can then put this AD group into the SP Members or Visitors group in a site collection