Forum Discussion

Mirek_N's avatar
Mirek_N
Iron Contributor
May 05, 2020

Adding guest from concrete domains

Hi,

 

we would like to allow to our end users to add new guest to Teams. We found a solution (https://docs.microsoft.com/en-us/azure/active-directory/b2b/allow-deny-list) that we can allow specific domains and users can not add anyone else, only people from these specific domains but we met with an issue that even global administrator is not able to add guests from different domains. Do you have an workaround for this? Time to time we need to add concrete guest e.g. with Live ID to our tenant but in this case it is not possible?

 

Thank you,

 

Mirek

  • That's how it works, not even admins can bypass the policy. You can of course temporary suspend/edit it, then switch it back on.

    • Mirek_N's avatar
      Mirek_N
      Iron Contributor

      Hi VasilMichev , thank you for your answer. I was afraid of it... So this is really best practice to do it this way? You have to turn off the policy and then turn it on again. That's not user friendly but ok. I will try to explain it to our IT and Security departments.

Resources