Forum Discussion

Olivier_Lumeau's avatar
Olivier_Lumeau
Brass Contributor
Apr 05, 2023

Teams Room - MTR Licence

Hi all, 

I'v created a room mailbox and assigned a MTR (Microsoft Teams  Room) Licence to the ressource account. 

When we try to join or call the room from outside (from another tenant) the room is joinable. 

But we don't want that. 
We only want the room is joinable from our tenant and only another partner tenant. 

I've checked the "ProcessExternalMeetingMessages" parameter and it is set to 'False'

Get-CalendarProcessing thinksmartroom | fl ProcessExternalMeetingMessages

ProcessExternalMeetingMessages : False


Does someone has any idea? 
Thanks a lot for you collaboration. 

3 Replies

  • If you have set the "ProcessExternalMeetingMessages" parameter to 'False', it should prevent external users from scheduling meetings with your room mailbox, but it may not prevent them from joining a meeting if they have been invited by someone in your organization.

    To restrict access to the room mailbox to only your organization and a specific partner tenant, you can create an "Allow list" of domains that are allowed to schedule meetings with the room. You can do this by setting the "AllowedDomains" parameter of the room mailbox to include your organization's domain and the partner tenant's domain.

    Here's an example command to set the "AllowedDomains" parameter for the room mailbox:

    Set-CalendarProcessing thinksmartroom -AllowedDomains "contoso.com","partner.com"

    Replace "thinksmartroom" with the name of your room mailbox, "contoso.com" with your organization's domain, and "partner.com" with the domain of the partner tenant.

    Once you've set the allowed domains, external users who try to schedule a meeting with the room mailbox will receive a rejection message stating that they are not allowed to schedule meetings with this resource.

    I hope this helps!
    • Olivier_Lumeau's avatar
      Olivier_Lumeau
      Brass Contributor
      Thank you for your answer.
      Ok, it is a setting for only One Room.

      but if I want to allow that at Organzation Level, how do I proceed?
      in this case, when a try to call (with the email address) a Teams Room in the Tenant B from my own tenant A, I can call the Teams Room.

      This is not what we want.
      From outside none can call a Teams Room except, the users of a Tenant C (for exemple)

      does it have something to do with "External Access" in "Users" in the Teams Admin Center?

      Thanks in advance for you feedback.
      For example
      • muhammad_kekereekun's avatar
        muhammad_kekereekun
        Iron Contributor
        Yes, you are correct that External Access settings may be relevant in this case.

        To restrict external access to Teams rooms, you can configure External Access policies in the Teams Admin Center. By default, external access is turned off for all Teams organizations, but you can enable it and configure settings to control who can communicate with your organization's Teams users and Teams rooms.

        To limit external access to only a specific tenant (e.g. Tenant C in your example), you can create an External Access policy that allows communication only with that tenant's domain.

Resources