Forum Discussion
How to prevent Teams users from creating SharePoint sites with external sharing enabled.
Is it possible to prevent users from creating a SharePoint site through MS Teams with external sharing enabled on the site?
In this case, I am doing some research for a large organisation as part of a risk assessment for enabling external sharing at the SharePoint admin centre tenant level for selected sites. Its been identified that if external sharing is enabled at the tenant level, then MS Teams users can create Teams with existing guest access. In this case, an existing Teams or SharePoint guest could request access to one of these sites.
Although the risk is small, being a large organisation, any risk is a concern.
We don't want to restrict Teams users from doing anything they could do before external sharing was enabled at the SharePoint admin centre.
Preferably, if there was a way to prevent Teams users from having the sharing option of 'existing guests only' available to them. Alternatively, MS Teams sites could be provisioned with access requests disabled at the SharePoint level.
Is it possible to control access at this resolution in MS365 Teams and SharePoint?
- Require a label when creating a new Team and restrict the set of available labels to ones that prevent external sharing. Details for example here: https://learn.microsoft.com/en-us/microsoftteams/sensitivity-labels
