Forum Discussion
null null
Nov 07, 2018Iron Contributor
external user access and lifecycle management
say we have sent across an share to someone not from the domain from a SharePoint online site.
so the user will have their email say abc@gmail.com and redeems and say they use their phone number to redeem.
Later if this user leaves the support organisation, what happens to the id, it will still remain and the user can still keep on using the site.
Is there a solution to this.
The last part of your question is not really clear to me, but we have multiple way to control and revoke sharing, including periodic re-attestation as detailed in this session from Ignite:
What’s new in external sharing and collaboration with OneDrive and SharePoint - BRK3100
- null nullIron Contributor
if an external user is added to a group called <site name> visitors, when the user leaves the organisation; how do we make sure that the user no longer is able to access the site. What could be the best practice.
The periodic re-attestation (Access reviews) feature can certainly help you with that, and you can also do the same process via custom PowerShell scripts.