Forum Discussion
external user access and lifecycle management
The last part of your question is not really clear to me, but we have multiple way to control and revoke sharing, including periodic re-attestation as detailed in this session from Ignite:
What’s new in external sharing and collaboration with OneDrive and SharePoint - BRK3100
if an external user is added to a group called <site name> visitors, when the user leaves the organisation; how do we make sure that the user no longer is able to access the site. What could be the best practice.
The periodic re-attestation (Access reviews) feature can certainly help you with that, and you can also do the same process via custom PowerShell scripts.
Hi null
The external user can leave a Team or Group. But external user's identity will continue to exist in your Azure AD as Guest user. As Azure AD admin, you have to disable/block sign-in or delete the external user from Azure AD.
