Issue sharing wih external users in OneDrive

Question

Has anyone else come across this scenario where a user is unable to share with external contacts? The error says that you "cannot share a secure link containing both people inside and outside of your organization".

After investigating it seems that in this case one of the external users is auto-added as a guest in Azure AD (presumably because their company use O365 too), and is now treating them as an internal user. This makes sense to me but won't make sense to our users... just because they have been auto-added to Azure AD, doesn't make them 'internal users'.

See attached example - look forward to people's thoughts?

deleted · Answer

External 365 users won't be treated as internal, or they shouldn't be. That is odd, you sure someone just didn't create the user to have an account in your tenant using the external e-mail address associated with the user record? If you search for the user in portal.azure.com in active directory what comes up? what type of user?

wroot · Answer

&gt;After investigating it seems that in this case one of the external users is auto-added as a guest in Azure AD (presumably because their company use O365 too)&nbsp;This is normal and they have to have at least regular MS account (not only O365) to become guests. They still are labeled as guests in Azure AD and they are not treated as internal users. The error you receive is odd. Maybe you somehow picked 2 options while sharing, although this shouldn't be possible. You can try removing all sharing and sharing again. A file can only be shared as a not secure anonymous link or with the authentication (secure) - either to only internal users or to anyone with MS account.

deleted · Answer

Thanks Christopher for your message. Yes definitely sure it isn't an internal account which we have created. When searching in Azure AD it appears a guest. This to me suggests we do have an issue of some sort within our tenant. Thanks for your help.

wroot · Answer

Why do you think you have a problem? If you have guests, then guest access is enabled in your tenant. So you might want to disable it and then remove guests users, if your tenant should only work with internal users. But if you want to share files with other organizations and also require for them to authenticate and be able to edit files (not just share as anonymous read only link), then you have to have guest access enabled.&nbsp;

deleted · Answer

The issue isn't that we have guest users in AAD - we frequently share files with external contacts requiring authentication (usually via OneDrive). The problem is they are appearing as 'internal' from the end user's perspective/when they go to share files.&nbsp;See example from my initial post:&nbsp;https://techcommunity.microsoft.com/t5/OneDrive-for-Business/Issue-sharing-wih-external-users-in-OneDrive/m-p/252141?attachment-id=7981&nbsp;In this example these are both external to the company, however OneDrive is seeing one of them as 'internal' (the one that's in AAD).

Forum Discussion

Issue sharing wih external users in OneDrive

Share

Resources