Forum Discussion

JakobRohde's avatar
JakobRohde
Iron Contributor
Jul 15, 2024

External sharing mysteries

I am struggling to find out exactly how external sharing works. Our tenant is set to "New and existing guests" in the External Sharing settings in SharePoint Admin Center. But I am still allowed to share files in Teams with external users that are not Guest Users. And they can access and (if granted permission) edit the the file. But they can't download the file.

 

How come Guest Users can access and edit files if they are neither new, nor existing guests? How come I am even able to share the files with unknown external users?

  • Kelly_Edinger's avatar
    Kelly_Edinger
    Bronze Contributor

    Hi JakobRohde - when you share a file externally, the person you're sharing with becomes a guest in your tenant, even if just for a single file. If you want to prevent this, you can change the settings for that particular site (via the SP admin center) to 'existing guests only.'

    • JakobRohde's avatar
      JakobRohde
      Iron Contributor

      Thanks, Kelly_Edinger. That is also what I have worked out. But does this mean that Conditional Access policies will apply to these kinds of guest users - even though I can't find them in Entra ID? 

      • Kelly_Edinger's avatar
        Kelly_Edinger
        Bronze Contributor
        that really depends on your conditional access policies and how they treat guests. you should be able to find the users in the admin center > users > guests

Resources