Forum Discussion
Solved
Guest user permissions control for Teams
I'm looking for assistance to find out our options to allow guest access to Microsoft Teams sites in our Office 365 tenant. I was hoping there were more granular controls to protect sensitive informa...
- Some recommendations
- Use Private Channels: only people you specify have access to private channels
- Use Sensitivity Labels: set labels on specific Teams so that guests don't have access to them
- Use Azure Information Protection / Labels on documents to ensure that only specific people can access specific documents
- Build separate SharePoint sites where only specific people have permissions and add them to Teams as Tabs
There are quite a few methods as opposed to having to break the underlying sharepoint permissions: that's a headache from a management perspective
Hope that answers your question!
Best, Chris
Some recommendations
- Use Private Channels: only people you specify have access to private channels
- Use Sensitivity Labels: set labels on specific Teams so that guests don't have access to them
- Use Azure Information Protection / Labels on documents to ensure that only specific people can access specific documents
- Build separate SharePoint sites where only specific people have permissions and add them to Teams as Tabs
There are quite a few methods as opposed to having to break the underlying sharepoint permissions: that's a headache from a management perspective
Hope that answers your question!
Best, Chris
- Use Private Channels: only people you specify have access to private channels
- Use Sensitivity Labels: set labels on specific Teams so that guests don't have access to them
- Use Azure Information Protection / Labels on documents to ensure that only specific people can access specific documents
- Build separate SharePoint sites where only specific people have permissions and add them to Teams as Tabs
There are quite a few methods as opposed to having to break the underlying sharepoint permissions: that's a headache from a management perspective
Hope that answers your question!
Best, Chris
ChrisHoardMVP I don't see the ability to convert a standard channel to a private channel. Is there a option to do this in powershell? Or does Microsoft have this on there roadmap to have that ability?
I will have to investigate sensitivity labels.
Adding Azure Information Protection labels on documents in the Sharepoint library seems like a daunting task.
- You can't convert standard to private or vice-versa. You will need to create them from scratch.
Sensitivity labels is here
https://docs.microsoft.com/en-us/MicrosoftTeams/sensitivity-labels
Classification of documents is here
https://docs.microsoft.com/en-us/microsoft-365/enterprise/infoprotect-configure-classification?view=o365-worldwide
Hope that answers your question
Best, ChrisChrisHoardMVP Chris, in regards to building a separate Sharepoint site with specific permissions, then adding that Sharepoint site as a tab in Teams. Does guest access need to be turned on in the Teams Admin center for the guest to access that tab in Teams? In other words, with external access only turned on, will a guest be able to access that tab in Teams?
- Yes, because guest access is needed to add the guest to the Team itself