Forum Discussion
Groups Guest access and SharePoint access
MicrosoftThanks guys for the feedback! Couple of things, we have been working internally to rationalize this settings & this is the plan of record as of now.
1. By-default Groups have guest access enabled & the corresponding team site as well.
2. Currently by default files cannot be shared with new guests unless they are member group. We are planning to *change* this default with full guest access enabled, so that you can share indivudal files with new guest users through SPO.
3. The way we want SPO settings & Groups settings for short-term is to be decoupled with the right messaging in the admin portal so that admins are clearly aware of what do they need to do to fully disable guest access.
- David Rosenthal
Thank you Sahil! This is a great update that will address a lot of the issues we've been seeing hopefully. Looking forward to seeing these changes roll out.
Thanks for this great update Sahil Arora do you have an ETA about when this will be rolled out?
Thanks Sahil.
About #2, my understanding is that today, by default, files can be shared with all existing external users, and not only with group members. Am I wrong?
- David Rosenthal
Any updates to this Sahil Arora? I'm starting to get a lot of users trying to share individual files from their modern team sites that are created as part of an Office 365 Group, who are getting the error which makes it look like external sharing is disabled when it actually isn't. This is generating a lot of tickets and complaints to our support function as users are used to external sharing in SharePoint and would like to share individual files that way as opposed to sharing the file contents of their entire Group.
- Sahil Arora
Hi David, We totally understand the gravity of this issue & we are actively working on to support this item.
Thanks,
Sahil
Hey Dave,
Run this first after you are authenticated with your tenant using PS.
when using connect-sposervice the -Url switch should point to your group team site not your SharePoint Admin Url
set-spotenant -SharingCapability ExternalUserAndGuestSharing
then
set-sposite https://yoursite.sharepoint.com/teams/development -SharingCapability ExternalUserAndGuestSharing
Although External Sharing is enabled in the Admin Center, running SPOSite -SharingCapability ExternalUserAndGuestSharing never worked.
Enabling External Sharing via PS using SPOTenant level worked.
I hope this works for you.
Best,
Bobby
Hi David-
We are also experiencing this issue and running SPOSite is not working as suggested in prior posts. Unless the user is already registered in Azure AD there is no way to share a file or folder from an Office 365 Group Team Site without receiving that dreaded message. Our requirements are similar to most, where Group Owners want to only share select Folders/Files with external users with having to add to the external user to the Office 365 Group.
I am hoping this much needed feature is coming soon.
Best,
Bobby
HI Bobby Cruz.
As already said in this thread and in several other threads, in order to share Group files and folders with external users not members of the Group itself, two conditions should be met:
- External sharing should be enabled at tenant level in Admin Center
- External sharing should be enabled at Group level by PowerShell
Follow carefully, step by step, the various sections in this article: https://support.office.com/en-us/article/Turn-external-sharing-on-or-off-for-SharePoint-Online-6288296a-b6b7-4ea4-b4ed-c297bf833e30?ui=en-US&rs=en-US&ad=US#ID0EAABAAA=Office_365_Groups
If it doesn't work, then double-check your steps: it MUST work if everything is well done.
Good luck.
