Forum Discussion

SergeiBaklan's avatar
Feb 04, 2019

Everyone except external users disappears form Group Visitors

Hi,

 For the group site when we add "Everyone except external users" to the "Site visitors" to grant people R/O access, it disappears in a while from the Site visitors and people lost access. Adding "Everyone except external users" as domain group in parallel with Site visitors/members/owners groups works.

 

Is that default behaviour or something is wrong in our configuration?

  • Wim_van_Delft's avatar
    Wim_van_Delft
    Copper Contributor
    Hi, we have been struggling with this for a long time and applied a work around (extra SP visitors group). Since a few months however, it seems that "Everyone except external users" is not purged from the default visitors group. So maybe this is "fixed" ?
  • AbbyDL's avatar
    AbbyDL
    Copper Contributor

    Hello! 

     

    I am unable to find a way to add "Everyone except external users" from Group Visitors in SHarepoint O365. Can anyone here help? Or is there another workaround I can do to ensure all internal users in my org can access this Sharepoint site I built?

     

      • AbbyDL's avatar
        AbbyDL
        Copper Contributor

        SergeiBaklan Thank you for getting back to me. However, When i try to add that user into the visitor group, it is not appearing. IS there another way I can do this?

  • Martin-Coupal's avatar
    Martin-Coupal
    Steel Contributor

    SergeiBaklan ,

    2 weeks ago, I've added "Everyone except external users" to Visitors on a SharePoint site based on a Private Group. Guess what, "Everyone except external users" is still in Visitors :lol:

     

    So Microsoft documentation on how permissions works on SP site based on M365 groups is not reflecting reality... The background job that should remove "Everyone except external users" from visitors when private or switch "Everyone except external users" from Visitor to Members in Public group does not seems to be running anymore....

     

    There seems to be nobody at Microsoft accountable for this a give a clear answer of what is going on.

  • This is happening all by design - but in my opinion, does not make it right.

    https://docs.microsoft.com/en-us/sharepoint/support/sharing-and-permissions/everyone-except-external-user-removed

    Microsoft has severely broken the SharePoint permissions model and they have not been able to resolve any of the permissions support calls we've logged.  They must have gotten new developers to build the O365 groups platform, people who had absolutely no idea how SharePoint permissions work, and the two are not playing nicely at all.  Since when does Microsoft have a say over who we add where in our platforms?  That is not on....  

  • ainnani's avatar
    ainnani
    Copper Contributor

    SergeiBaklan 

     

    When site is Private, and you want to give access to the site to "Everyone except external users" read only, we cannot.  I too had a same issue and had opened a ticket with Microsoft.  They said that it is by design and you cannot use "Everyone except external users" in the Visitors group.  A background process is run by Microsoft, that removes this from the Visitors group.  You may search your Audit logs in the Security and Compliance center and will get hold of this information.  I was able to find this in the Audit logs and hence was sure that it was not done by anyone in my team but Microsoft did it.

     

    For time being the solution, I see is to create your own Security group (or may be a Dynamic group) and add users into that security group.  Later, use the security group to add it into your SharePoint Visitors group.

    • SergeiBaklan's avatar
      SergeiBaklan
      MVP

      Kevin, as far as workaround works plus there is no such effect on isolated sites - we will survive. Opening of the support ticket is usually quite time consuming for us. I mean not opening itself, but all following communications and tests.  That's for critical cases. 

      • Pieter Op De Beéck's avatar
        Pieter Op De Beéck
        Iron Contributor

        Slightly related to this, I have issue with the "Everyone except external users" on Public groups! I want to make an exception and give them Read permissions. As a result, "Everyone except external users" is stored in the underlying Visitors (Read) group. After a couple of days, "Everyone except external users" is back in the Members group and have back their Edit permissions. 
        This is not a single event - this is the case for all our Public O365 Groups where we want to give them only Read permissions. Anyone has the same issues on their tenant? Ours is located in W-Europe.

    • SergeiBaklan's avatar
      SergeiBaklan
      MVP

      Hi Abhimanyu Singh , thank you for the link, will add my question to that place as well. I tried to find something similar in Discussions but missed the blog.

       

Resources