Forum Discussion

Mijata's avatar
Mijata
Copper Contributor
Jul 15, 2020

Avoid external/guest users from being added to Owner or FullControl groups

Hi,

the use case is to have Site Collections being shared with externals/guest users but we are looking for a technical solution to prohibit externals to be assigned to SharePoint permission groups having full control for example.

 

Is there an OOTB way to avoid this or a smart workaround?

 

All of what we considered so far would be rather reporting on it through logs, site discoveries...

 

 

Permissions
SharePoint Online
  • Andrew Hodges's avatar
    Andrew Hodges
    Bronze Contributor
    Jul 15, 2020

    Hi Mijata ,

     

    I have only ever been able to stop members of the Owners group adding other users to the owners group as below, change the Owner of the group to a site collection admin. 

     

     

    You cannot as far as I know(last time a looked) stop owners with Full control creating a new SharePoint group with Full Control. For that it would be down to a training issue. 

Resources