Forum Discussion
john john
May 19, 2020Steel Contributor
Define "Allow only users in specific security group to share externally" for sharepoint sites only
As per my knowledge if we define that only users inside specific security group can share with external users, as follow:- then this will be applied to SharePoint sites + onedrive person...
StephenRice
Microsoft
May 29, 2020Hi john john,
This particular setting is only available at the organization level today and so is working as expected. The policies here will apply to content stored in OneDrive and in SharePoint. There is no way to configure separate lists of allowed users today. If you have any questions, feel free to let me know! Thanks!
Stephen Rice
Senior Program Manager, OneDrive
HenricStr
Feb 04, 2022Copper Contributor
For me this settings does not work. But that might be because I do not know how to combine this option with the overall tenant sharing settings.
For OneDrive our setting is least permissive, we only allow sharing withing our organization.
I would now like for a few users (that are in the same sec.group) to be able to share outside the organisation. But even after enabling the option "Allow only users in specific security group to share externally" it does not work.
Does our global setting need to be changed, to most permissive? And only then will the option "Allow only users in specific security group to share externally" actually serve it's purpose by actually blocking the sharing option for anyone not included in the sec.group
regards
- StephenRiceFeb 04, 2022
Microsoft
Hi HenricStr,
That's correct. The overall tenant sharing settings must be enabled in order for ANY external sharing to occur. Once they are enabled, every other setting applies further restrictions (such as only allowing the external sharing by specific people). Hope that helps!
Stephen Rice
Senior Product Manager, OneDrive- Tobbe674953Sep 29, 2022Copper Contributor
i have an issue with this setting.
as soon as i enable it, all external sharing is disallowed, even for users that are members of the specified group. If i disable the setting again, external sharing works.
what could be the issue here?
thanks in advance
- fbsPaulMar 24, 2023Copper ContributorDid you get this figured out?
Two things I figured out are that it has to be a 'Mail-Enabled Security Group' and not just a 'Security Group' and also.... these settings seem to take a WHILE to take effect. 20 minutes or more later, no changes seem to be in place.
It's hard to troubleshoot this altogether when the changes are not only ambiguous (Microsoft's documentation completely fails to explain how it works), but they take long periods of time for minor changes to take effect. This is completely impractical.