Forum Discussion

Iron Contributor

Feb 06, 2018

Office 365 SharePoint Site Shared With External - Some users have "Deny" Permissions

Hi, We have an SharePoint Online site which is shared with a number of externals. Some of the externals (who are authenticating with Office 365 accounts, not Microsoft Live accounts) are having the...

Brass Contributor

Jul 17, 2018

Has there been any more updates to this problem? I am doing some testing with the domain restrictions as it is a key part of our sharing in regards to securing data. The restriction works for any new users coming in. The issue I am seeing is that if an external user has already accepted an invite to one of our externally shared sites, they are able to be invited to another site where their domain is not allowed. I am wondering if it has to do with the same scenario above where it is looking at an email field that is not populated somewhere.

Srikanth Komirishetty

Brass Contributor

Jul 22, 2018

Joe, you are able to share with an already accepted external user from a domain A on another externally shared site where domain A is not white listed is because the user from domain A is in your AAD and is a valid user in your tenant. Good thing is - though you can add the user to the site, the user gets notification but they will not be able to access the content on the site. When you check the user's permissions, you will see the deny list. When the user tries to access the link, he/she will be prompted with a message "Let us know why you need access...". Access request approving person on the site will be able to see requests and be able to approve but the user still gets "Let us know why you need access..." message.

But to your and our concern, the user shouldn't be allowed to receive share or invite notifications when their domain is not white listed on a site collection.

Hope this helps.