Home

Can't add guest without first being in AAD tenant

%3CLINGO-SUB%20id%3D%22lingo-sub-187766%22%20slang%3D%22en-US%22%3ECan't%20add%20guest%20without%20first%20being%20in%20AAD%20tenant%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-187766%22%20slang%3D%22en-US%22%3E%3CP%3EI'm%20having%20an%20issue%20that%20doesn't%20seem%20to%20match%20up%20with%20the%20expected%20admin%20experience%20documented%20%3CA%20href%3D%22https%3A%2F%2Fdocs.microsoft.com%2Fen-us%2Fmicrosoftteams%2Fadd-guests%22%20target%3D%22_blank%22%20rel%3D%22noopener%20noreferrer%20noopener%20noreferrer%22%3Ehere%3C%2FA%3E.%20Essentially%2C%20I%20can't%20add%20a%20guest%20that%20is%20not%20in%20the%20AAD%20tenant%20through%20Teams%20desktop%2Fweb%20apps.%20I%20get%20the%20%22We%20didn't%20find%20any%20matches%22%20error.%3C%2FP%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3CP%3EIf%20the%20guest%20is%20in%20the%20AAD%20(by%20being%20in%20an%20Office%20365%20group%2C%20at%20least)%2C%20then%20I%20can%20add%20the%20guest%20to%20the%20Team%20via%20the%20apps.%26nbsp%3B%3C%2FP%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3CP%3EFor%20AAD%2C%20I%20can%20add%20guests%20and%20for%20Office%20365%26nbsp%3BGroups%2C%20I%20have%20%22%3CSPAN%3ELet%20group%20members%20outside%20the%20organization%20access%20group%20content%22%3C%2FSPAN%3E%20enabled.%3C%2FP%3E%3C%2FLINGO-BODY%3E%3CLINGO-LABS%20id%3D%22lingo-labs-187766%22%20slang%3D%22en-US%22%3E%3CLINGO-LABEL%3EAdministrator%3C%2FLINGO-LABEL%3E%3CLINGO-LABEL%3EGuest%20Access%3C%2FLINGO-LABEL%3E%3CLINGO-LABEL%3EMicrosoft%20Teams%3C%2FLINGO-LABEL%3E%3C%2FLINGO-LABS%3E%3CLINGO-SUB%20id%3D%22lingo-sub-288393%22%20slang%3D%22en-US%22%3ERe%3A%20Can't%20add%20guest%20without%20first%20being%20in%20AAD%20tenant%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-288393%22%20slang%3D%22en-US%22%3E%3CP%3EPretty%20much%20yes.%3C%2FP%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3CP%3EFirst%20you%20need%20to%20enable%20guest%20users%20in%20Teams.%20It%20was%20possible%20to%20do%20this%20in%20regular%20Admin%20Center%20%26gt%3B%20Settings%20%26gt%3B%20Services%20%26amp%3B%20add-ins%20%26gt%3B%20Teams.%20Then%20this%20setting%20was%20grayed%20out%20and%20one%20had%20to%20use%20PowerShell%20command.%20I%20believe%20now%20there%20is%20a%20menu%20in%20new%20Teams%20and%20Skype%20admin%20center%20in%20External%20access%20section.%20This%20will%20allow%20to%20add%20existing%20external%20users%20to%20teams.%3C%2FP%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3CP%3EYou%20also%20have%20to%20enable%20the%20setting%20i%20have%20mentioned%20(Settings%20%26gt%3B%20Security%20%26amp%3B%20privacy%20%26gt%3B%3C%2FP%3E%3CP%20class%3D%22western%22%3ELet%20users%20add%20new%20guests%20to%20the%20organization).%20This%20will%20allow%20users%20to%20add%20new%20external%20users%20to%20organization%20and%20so%20to%20teams%20as%20well.%3C%2FP%3E%3CP%20class%3D%22western%22%3E%26nbsp%3B%3C%2FP%3E%3CP%20class%3D%22western%22%3EUsually%20it%20takes%20an%20hour%20or%20so%20to%20get%20enabled%2C%20but%20it%20can%20take%20longer%2C%20and%20MS%20usually%20suggest%20to%20wait%20for%2024%20hours.%3C%2FP%3E%3CP%20class%3D%22western%22%3E%26nbsp%3B%3C%2FP%3E%3CP%20class%3D%22western%22%3EThen%20you%20should%20be%20able%20to%20create%20a%20new%20team%20and%20add%20new%20external%20users%20to%20it.%3C%2FP%3E%3C%2FLINGO-BODY%3E%3CLINGO-SUB%20id%3D%22lingo-sub-288392%22%20slang%3D%22en-US%22%3ERe%3A%20Can't%20add%20guest%20without%20first%20being%20in%20AAD%20tenant%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-288392%22%20slang%3D%22en-US%22%3E%3CP%3EThanks%20you%20!%20This%20is%20exactly%20what%20happened.%3C%2FP%3E%3CP%3EI%20tried%20this%20morning%20with%20a%20fresh%20Teams%20Group%20from%20scratch.%20it%20works.%3C%2FP%3E%3CP%3ESo.%20The%20path%20to%20take%20I%20believe%20could%20be%20%3A%3C%2FP%3E%3CP%3EGo%20(ask%20your%20admin)%20into%20the%20o365%20console.%3C%2FP%3E%3CP%3EOn%20the%20bottom%20left%20%3A%20select%20Teams%20%26amp%3B%20Skype%20(console)%20something%20like%26nbsp%3B%3CA%20href%3D%22https%3A%2F%2Fadmin.teams.microsoft.com%2F%22%20target%3D%22_blank%22%20rel%3D%22noopener%20noreferrer%20noopener%20noreferrer%22%3Ehttps%3A%2F%2Fadmin.teams.microsoft.com%2F%3C%2FA%3E%3C%2FP%3E%3CP%3EFind%20the%20settings%20there.%20Activate%20the%20user%20access%20and%20toggle%20the%20required%20option%20below%20(since%20the%20console%20is%20down%20while%20I%20am%20writing%20this%2C%20I%20can't%20be%20more%20precise%2C%20guide%20available%20on%20line%20)%3C%2FP%3E%3CP%3EWait...%20(%20the%20night%20%3F%20)%3C%2FP%3E%3CP%3EThen%20create%20a%20test%20group%20and%26nbsp%3Bvoil%C3%A0.%20(%20the%20adding%20option%20detect%20the%20foreign%20email%20address%20and%20propose%20to%20add%20it%20as%20a%20guest.%20You%20must%20change%20the%20visible%20name%20to%20something%20more%20friendly%20with%20the%20edit%20button%20before%20creating%20the%20identity%20)%26nbsp%3B%26nbsp%3B%3C%2FP%3E%3CP%3EThanks%20Oleg%20%2F%20Community%20for%20all%20your%20responses.%3C%2FP%3E%3CP%3EEric%3C%2FP%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3C%2FLINGO-BODY%3E%3CLINGO-SUB%20id%3D%22lingo-sub-288355%22%20slang%3D%22en-US%22%3ERe%3A%20Can't%20add%20guest%20without%20first%20being%20in%20AAD%20tenant%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-288355%22%20slang%3D%22en-US%22%3E%3CP%3EWhat%20some%20documents%20linked%20above%20fail%20to%20mention%20is%20that%20you%20also%20need%3C%2FP%3E%3CP%20class%3D%22western%22%3ESettings%20%26gt%3B%20Security%20%26amp%3B%20privacy%20%26gt%3B%20Let%20users%20add%20new%20guests%20to%20the%20organization%3C%2FP%3E%3CP%20class%3D%22western%22%3Esetting%20enabled%20in%20your%20Admin%20Center%20also.%20And%20after%20enabling%20it%20wait%20for%20at%20least%2024%20hours%20to%20make%20sure%20it%20is%20enabled%20and%20started%20working.%20%3CSTRONG%3EThis%20will%20only%20work%20for%20teams%20created%20after%20enabling%20this%20setting.%20%3C%2FSTRONG%3EOld%20teams%20won't%20allow%20adding%20guests.%3C%2FP%3E%3C%2FLINGO-BODY%3E%3CLINGO-SUB%20id%3D%22lingo-sub-288301%22%20slang%3D%22en-US%22%3ERe%3A%20Can't%20add%20guest%20without%20first%20being%20in%20AAD%20tenant%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-288301%22%20slang%3D%22en-US%22%3E%3CP%3EIn%20my%20case%20it%20was%20simply%20a%20matter%20of%20time.%20%26nbsp%3BAfter%20I%20couldn't%20get%20it%20working%20initially%20I%20gave%20up.%20%26nbsp%3BTried%20again%20a%20few%20weeks%20on%20and%20it%20worked%20fine.%3C%2FP%3E%3C%2FLINGO-BODY%3E%3CLINGO-SUB%20id%3D%22lingo-sub-288251%22%20slang%3D%22en-US%22%3ERe%3A%20Can't%20add%20guest%20without%20first%20being%20in%20AAD%20tenant%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-288251%22%20slang%3D%22en-US%22%3E%3CP%3Efinally%20It%20seems%20I%20succeed%20to%20set%20the%20command%20but%20nothing%20changed...%20any%20suggestion%20%3F%3C%2FP%3E%3C%2FLINGO-BODY%3E%3CLINGO-SUB%20id%3D%22lingo-sub-288235%22%20slang%3D%22en-US%22%3ERe%3A%20Can't%20add%20guest%20without%20first%20being%20in%20AAD%20tenant%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-288235%22%20slang%3D%22en-US%22%3E%3CP%3EDear%20James%2C%3C%2FP%3E%3CP%3EI%20have%20same%20issue%20as%20you%20all%2C%20I'm%20trying%20to%20invite%20guest%20to%20team%20group%2C%20but%20does%20not%20works...%3C%2FP%3E%3CP%3EI%20searched%20all%20afternoon%20into%20the%20console%2C%20turn%20things%20on%26nbsp%3Bto%20guest%20etc..%20still%20no%20effect%26nbsp%3B%3C%2FP%3E%3CP%3EI%20am%20not%20windows%20expert.%20I%20understand%20from%20your%20post%20that%20I%20should%20do%20things%20in%20the%20powershell%20stuff%2C%20but%20I%20just%20know%20mac%20%26amp%3B%20unix%20ssh....%20could%20you%20help%20with%20the%20sequence%20I%20should%20follow%20to%20do%20what%20the%20expert%20recommand%20%3F%20(%20or%20if%20you%20should%20point%20me%20to%20some%20tutorial%20)%20I%20did%20some%20research%20install%20some%20module%20but%20this%20is%20unfamiliar%20%26amp%3B%20complex%20to%20me...%3C%2FP%3E%3CP%3Ewith%20many%20thanks%2C%3C%2FP%3E%3CP%3EEric%3C%2FP%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3C%2FLINGO-BODY%3E%3CLINGO-SUB%20id%3D%22lingo-sub-277177%22%20slang%3D%22en-US%22%3ERe%3A%20Can't%20add%20guest%20without%20first%20being%20in%20AAD%20tenant%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-277177%22%20slang%3D%22en-US%22%3E%3CP%3EAfter%20hours%20of%20trying%20everything%20w%2F%20support%20this%20was%20the%20command%20that%20fixed%20it%20all!!!!%3C%2FP%3E%3CP%3E%26nbsp%3BSet-MsolCompanySettings%20-UsersPermissionToReadOtherUsersEnabled%20%24True%3C%2FP%3E%3C%2FLINGO-BODY%3E%3CLINGO-SUB%20id%3D%22lingo-sub-255225%22%20slang%3D%22en-US%22%3ERe%3A%20Can't%20add%20guest%20without%20first%20being%20in%20AAD%20tenant%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-255225%22%20slang%3D%22en-US%22%3E%3CP%3EThanks%20-%20I%20shall%20wait%20for%20a%20few%20days%20and%20try%20again.%20%26nbsp%3B%3C%2FP%3E%3C%2FLINGO-BODY%3E%3CLINGO-SUB%20id%3D%22lingo-sub-255224%22%20slang%3D%22en-US%22%3ERe%3A%20Can't%20add%20guest%20without%20first%20being%20in%20AAD%20tenant%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-255224%22%20slang%3D%22en-US%22%3E%3CP%3EI%20didn't%20do%20anything%20to%20resolve%20it%20but%20it%20does%20appear%20to%20work%20now.%26nbsp%3B%3C%2FP%3E%3C%2FLINGO-BODY%3E%3CLINGO-SUB%20id%3D%22lingo-sub-255223%22%20slang%3D%22en-US%22%3ERe%3A%20Can't%20add%20guest%20without%20first%20being%20in%20AAD%20tenant%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-255223%22%20slang%3D%22en-US%22%3E%3CP%3ENick%20did%20you%20ever%20resolve%20this%3F%20%26nbsp%3BI%20have%20the%20exact%20same%20behaviour%20in%20my%20O365%20tenant.%20%26nbsp%3BHaven't%20waited%2024hrs%20since%20I%20enabled%20Teams%2C%20but%20it's%20been%20several%20hours%20since%20I%20set%20it%20up%20-%20checked%20all%20the%20requisite%20settings%20in%20AAD%2C%20Teams%20etc.%3C%2FP%3E%3C%2FLINGO-BODY%3E%3CLINGO-SUB%20id%3D%22lingo-sub-228168%22%20slang%3D%22en-US%22%3ERe%3A%20Can't%20add%20guest%20without%20first%20being%20in%20AAD%20tenant%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-228168%22%20slang%3D%22en-US%22%3E%3CP%3EI%20worked%20with%20Microsoft%20on%20this%20same%20issue%20for%20several%20hours%20of%20the%20past%20couple%20of%20days%20and%20the%20conclusion%20was%20that%20the%20following%20setting%20needed%20to%20be%20enabled.%26nbsp%3B%3C%2FP%3E%3CP%3E%3CBR%20%2F%3EThe%20steps%20were%20as%20follows%3A%3C%2FP%3E%3CP%3E1)%20Enable%20this%20setting%3CBR%20%2F%3E2)%20Wait%20for%20it%20to%20push%20through%20on%20the%20back%20end%20(seemed%20to%20take%2030%2B%20minutes%20when%20I%20attempted--may%20take%20more)%3C%2FP%3E%3CP%3E3)%20Attempt%20to%20add%20a%20guest%20that%20doesn't%20exist%20on%20your%20AAD%20tenant%20in%20Teams%3C%2FP%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3CP%3E%3CSPAN%3EPlease%20note%20that%20enabling%20this%20setting%20means%20that%20any%20of%20your%20Team%20owners%20will%20be%20able%20to%20able%20to%20add%20guests%20to%20their%20Teams%20just%20as%20they%20do%20internal%20users.%26nbsp%3B%3CBR%20%2F%3E%3C%2FSPAN%3E%3C%2FP%3E%3CP%3E%3CSPAN%3EAlso%20if%20the%20setting%20was%20already%20enabled%20you%20may%20need%20to%20disable%2C%20wait%2030%2B%20minutes%2C%20then%20re-enable%20and%20wait%2030%2B%20minutes.%20It%20seems%20it%20takes%20some%20time%20to%20process%20on%20the%20back%20end%20of%20things.%3CBR%20%2F%3E%3CBR%20%2F%3EHope%20this%20helps.%3C%2FSPAN%3E%3C%2FP%3E%3CP%3E%3CBR%20%2F%3E%3CSPAN%20class%3D%22lia-inline-image-display-wrapper%20lia-image-align-inline%22%20style%3D%22width%3A%20591px%3B%22%3E%3CIMG%20src%3D%22https%3A%2F%2Fgxcuf89792.i.lithium.com%2Ft5%2Fimage%2Fserverpage%2Fimage-id%2F39620i51F9289DE4377BC9%2Fimage-size%2Flarge%3Fv%3D1.0%26amp%3Bpx%3D999%22%20alt%3D%22guest%20access%20teams%20issue.png%22%20title%3D%22guest%20access%20teams%20issue.png%22%20%2F%3E%3C%2FSPAN%3E%3C%2FP%3E%3C%2FLINGO-BODY%3E%3CLINGO-SUB%20id%3D%22lingo-sub-226786%22%20slang%3D%22en-US%22%3ERe%3A%20Can't%20add%20guest%20without%20first%20being%20in%20AAD%20tenant%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-226786%22%20slang%3D%22en-US%22%3E%3CP%3EGive%20it%2024%20hours%20for%20the%20permissions%20to%20propagate.%20I%20had%20to%20wait%20a%20while%20until%20it%20worked.%3C%2FP%3E%3C%2FLINGO-BODY%3E%3CLINGO-SUB%20id%3D%22lingo-sub-226207%22%20slang%3D%22en-US%22%3ERe%3A%20Can't%20add%20guest%20without%20first%20being%20in%20AAD%20tenant%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-226207%22%20slang%3D%22en-US%22%3E%3CP%3ENope.%20Same%20problem%20exists%20as%20described%20above.%3C%2FP%3E%3C%2FLINGO-BODY%3E%3CLINGO-SUB%20id%3D%22lingo-sub-226201%22%20slang%3D%22en-US%22%3ERe%3A%20Can't%20add%20guest%20without%20first%20being%20in%20AAD%20tenant%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-226201%22%20slang%3D%22en-US%22%3E%3CP%3EHi%20Nick%2C%3C%2FP%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3CP%3EI'm%20having%20the%20same%20exact%20issue%20here--did%20you%20ever%20find%20a%20resolution%20to%20this%3F%3C%2FP%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3CP%3EThanks%3C%2FP%3E%3C%2FLINGO-BODY%3E%3CLINGO-SUB%20id%3D%22lingo-sub-220306%22%20slang%3D%22en-US%22%3ERe%3A%20Can't%20add%20guest%20without%20first%20being%20in%20AAD%20tenant%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-220306%22%20slang%3D%22en-US%22%3E%3CP%3E%3CSPAN%3EHave%20you%20checked%20%22Sharing%22%20in%20Office%20365%20Admin%20Portal%20-%26gt%3B%20Settings%20-%26gt%3B%20Security%20%26amp%3B%20privacy.%20This%20is%20a%26nbsp%3BSharePoint%20Online%26nbsp%3Bsecurity%26nbsp%3Bsetting%20that%20needs%20to%20be%20enabled%20to%20allow%20users%20(such%20as%20Team%20owners)%20to%20create%20guests.%3C%2FSPAN%3E%3C%2FP%3E%3C%2FLINGO-BODY%3E%3CLINGO-SUB%20id%3D%22lingo-sub-203897%22%20slang%3D%22en-US%22%3ERe%3A%20Can't%20add%20guest%20without%20first%20being%20in%20AAD%20tenant%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-203897%22%20slang%3D%22en-US%22%3ESame%20here..%20Can't%20invite%20guests%20from%20the%20Teams%20client.%20All%20my%20setting%20are%20correct.%3C%2FLINGO-BODY%3E%3CLINGO-SUB%20id%3D%22lingo-sub-202986%22%20slang%3D%22en-US%22%3ERe%3A%20Can't%20add%20guest%20without%20first%20being%20in%20AAD%20tenant%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-202986%22%20slang%3D%22en-US%22%3E%3CP%3ESame%20issue%20here!%20clearly%20a%20bug!%3C%2FP%3E%3C%2FLINGO-BODY%3E%3CLINGO-SUB%20id%3D%22lingo-sub-187888%22%20slang%3D%22en-US%22%3ERe%3A%20Can't%20add%20guest%20without%20first%20being%20in%20AAD%20tenant%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-187888%22%20slang%3D%22en-US%22%3E%3CP%3EThanks%20for%20your%20reply.%20The%20link%20you%20shared%20says%2C%20%22%3CSPAN%3EWith%20Azure%20AD%20business-to-business%20(B2B)%20collaboration%2C%20sending%20invitations%20to%20potential%20guest%20users%20isn%E2%80%99t%20restricted%20to%20tenant%20admins.%22%20That%20means%20to%20me%20that%20I%20should%20have%20no%20inherent%20restrictions%20to%20sharing%20as%20a%20tenant%20admin%20with%20Azure%20B2B.%20I%20had%20already%20had%20the%20flag%20%22Admins%20and%20users%20in%20the%20guest%20inviter%20role%20can%20invite%22%20set%20to%20yes.%20%3C%2FSPAN%3E%3C%2FP%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3CP%3E%3CSPAN%3EAs%20a%20test%2C%20I%20enabled%20%22Members%20can%20invite%22%20just%20in%20case%20Teams%20isn't%20recognizing%20me%20as%20the%20tenant%20admin%2C%20but%20that%20still%20didn't%20work.%20I%20get%20the%20same%20message%2C%20%22We%20didn't%20find%20any%20matches.%22%3C%2FSPAN%3E%3C%2FP%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3CP%3E%3CSPAN%3EWhile%20I%20believe%20it%20may%20be%20working%20with%20your%20tenant%2C%20I%20can%20tell%20you%20it%20does%20not%20work%20on%20mine!%26nbsp%3B%3C%2FSPAN%3E%3C%2FP%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3C%2FLINGO-BODY%3E%3CLINGO-SUB%20id%3D%22lingo-sub-187885%22%20slang%3D%22en-US%22%3ERe%3A%20Can't%20add%20guest%20without%20first%20being%20in%20AAD%20tenant%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-187885%22%20slang%3D%22en-US%22%3E%3CP%3EThe%20settings%20are%20in%20the%20article%20I%20linked%20above.%20And%20to%20prove%20to%20you%20that%20it's%20possible%2C%20here's%20a%20screenshot%20I%20just%20made%20for%20inviting%20a%20user%20from%20another%20tenant.%20Note%20the%20%22add%20as%20a%20guest%22%20part%3A%3C%2FP%3E%0A%3CP%3E%26nbsp%3B%3C%2FP%3E%0A%3CP%3E%3CSPAN%20class%3D%22lia-inline-image-display-wrapper%20lia-image-align-inline%22%20style%3D%22width%3A%20756px%3B%22%3E%3CIMG%20src%3D%22https%3A%2F%2Fgxcuf89792.i.lithium.com%2Ft5%2Fimage%2Fserverpage%2Fimage-id%2F33120i54E74C1729C66C21%2Fimage-size%2Flarge%3Fv%3D1.0%26amp%3Bpx%3D999%22%20alt%3D%22TeamsGuests.png%22%20title%3D%22TeamsGuests.png%22%20%2F%3E%3C%2FSPAN%3E%3C%2FP%3E%3C%2FLINGO-BODY%3E%3CLINGO-SUB%20id%3D%22lingo-sub-187877%22%20slang%3D%22en-US%22%3ERe%3A%20Can't%20add%20guest%20without%20first%20being%20in%20AAD%20tenant%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-187877%22%20slang%3D%22en-US%22%3E%3CP%3EI'm%20the%20tenant%20admin%20so%20I'm%20not%20sure%20what%20settings%20you're%20speaking%20about.%20Can%20you%20clarify%3F%20I%20have%20no%20issue%20adding%20guests%20via%20Office%20365%20Groups.%20What%20I'm%20saying%20is%20that%20I%20can%20only%20add%20guests%20to%20Teams%20%3CEM%3Eafter%3C%2FEM%3E%20they've%20been%20added%20as%20guests%20either%20through%20Office%20365%20Groups%20or%20AAD%20directly.%26nbsp%3B%3C%2FP%3E%3C%2FLINGO-BODY%3E%3CLINGO-SUB%20id%3D%22lingo-sub-187872%22%20slang%3D%22en-US%22%3ERe%3A%20Can't%20add%20guest%20without%20first%20being%20in%20AAD%20tenant%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-187872%22%20slang%3D%22en-US%22%3E%3CP%3EWhat%20you%20are%20describing%20looks%20more%20like%20an%20issue%20with%20inviting%20users%20to%20your%20tenant%2C%20not%20the%20%22add%20Guest%20to%20Team%20part%22.%20I%20can%20certainly%20add%20guests%20that%20are%20not%20already%20part%20of%20my%20AAD%2C%20did%20you%20check%20all%20the%20correct%20settings%20are%20configured%20as%20per%3A%20%3CA%20href%3D%22https%3A%2F%2Fdocs.microsoft.com%2Fen-us%2Fmicrosoftteams%2Fteams-dependencies%22%20target%3D%22_blank%22%20rel%3D%22noopener%20noreferrer%20noopener%20noreferrer%22%3Ehttps%3A%2F%2Fdocs.microsoft.com%2Fen-us%2Fmicrosoftteams%2Fteams-dependencies%3C%2FA%3E%3C%2FP%3E%0A%3CP%3E%26nbsp%3B%3C%2FP%3E%0A%3CP%3E%26nbsp%3B%3C%2FP%3E%3C%2FLINGO-BODY%3E%3CLINGO-SUB%20id%3D%22lingo-sub-187804%22%20slang%3D%22en-US%22%3ERe%3A%20Can't%20add%20guest%20without%20first%20being%20in%20AAD%20tenant%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-187804%22%20slang%3D%22en-US%22%3E%3CP%3EYes%2C%20but%20there%20is%20a%20setting%20to%20control%20non-admin%20ability.%26nbsp%3B%20I%20missed%20'admin%20experience'%20from%20Nick's%20original%20message%2C%20hence%20why%20I%20posted%20the%20link.%3C%2FP%3E%3C%2FLINGO-BODY%3E%3CLINGO-SUB%20id%3D%22lingo-sub-187802%22%20slang%3D%22en-US%22%3ERe%3A%20Can't%20add%20guest%20without%20first%20being%20in%20AAD%20tenant%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-187802%22%20slang%3D%22en-US%22%3E%3CP%3EI'm%20an%20admin%20and%20have%20guest%20access%20enabled%20in%20the%20tenant.%20I%20believe%20it%20should%20work%20as%20documented%20here%3A%20%3CA%20href%3D%22https%3A%2F%2Fdocs.microsoft.com%2Fen-us%2Fmicrosoftteams%2Fadd-guests%22%20target%3D%22_self%22%20rel%3D%22noopener%20noreferrer%20noopener%20noreferrer%22%3Ehttps%3A%2F%2Fdocs.microsoft.com%2Fen-us%2Fmicrosoftteams%2Fadd-guests%3C%2FA%3E.%20This%20seems%20to%20be%20a%20bug%20within%20the%20Teams%20client.%26nbsp%3B%3C%2FP%3E%3C%2FLINGO-BODY%3E%3CLINGO-SUB%20id%3D%22lingo-sub-187800%22%20slang%3D%22en-US%22%3ERe%3A%20Can't%20add%20guest%20without%20first%20being%20in%20AAD%20tenant%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-187800%22%20slang%3D%22en-US%22%3EYou%20should%20be%20able%20to%20add%20guests%20to%20Teams%20without%20having%20then%20in%20your%20Azure%20AD%3C%2FLINGO-BODY%3E%3CLINGO-SUB%20id%3D%22lingo-sub-187789%22%20slang%3D%22en-US%22%3ERe%3A%20Can't%20add%20guest%20without%20first%20being%20in%20AAD%20tenant%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-187789%22%20slang%3D%22en-US%22%3E%3CP%3EWhat%20about%20the%20other%20settings%3F%20%26nbsp%3B%3CA%20href%3D%22https%3A%2F%2Fdocs.microsoft.com%2Fen-us%2Fmicrosoftteams%2Fguest-access-checklist%22%20target%3D%22_blank%22%20rel%3D%22noopener%20noreferrer%20noopener%20noreferrer%22%3Ehttps%3A%2F%2Fdocs.microsoft.com%2Fen-us%2Fmicrosoftteams%2Fguest-access-checklist%3C%2FA%3E%3C%2FP%3E%3C%2FLINGO-BODY%3E%3CLINGO-SUB%20id%3D%22lingo-sub-187774%22%20slang%3D%22en-US%22%3ERe%3A%20Can't%20add%20guest%20without%20first%20being%20in%20AAD%20tenant%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-187774%22%20slang%3D%22en-US%22%3EYes.%20I%20can%20add%20guests%20to%20a%20team%20without%20issue%20so%20long%20as%20they're%20already%20in%20the%20AAD.%3C%2FLINGO-BODY%3E%3CLINGO-SUB%20id%3D%22lingo-sub-187772%22%20slang%3D%22en-US%22%3ERe%3A%20Can't%20add%20guest%20without%20first%20being%20in%20AAD%20tenant%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-187772%22%20slang%3D%22en-US%22%3E%3CP%3ESorry%20if%20this%20is%20a%20stupid%20question%2C%20but%20have%20you%20turned%20on%20the%20guest%20access%20for%20Teams%3F%3CBR%20%2F%3E%3CBR%20%2F%3EMore%20info%3A%26nbsp%3B%3CA%20href%3D%22https%3A%2F%2Fdocs.microsoft.com%2Fen-us%2Fmicrosoftteams%2Fset-up-guests%26nbsp%3B%22%20target%3D%22_blank%22%20rel%3D%22noopener%20noreferrer%20noopener%20noreferrer%22%3Ehttps%3A%2F%2Fdocs.microsoft.com%2Fen-us%2Fmicrosoftteams%2Fset-up-guests%3C%2FA%3E%26nbsp%3B%3C%2FP%3E%3C%2FLINGO-BODY%3E
Nick Nigro
Contributor

I'm having an issue that doesn't seem to match up with the expected admin experience documented here. Essentially, I can't add a guest that is not in the AAD tenant through Teams desktop/web apps. I get the "We didn't find any matches" error.

 

If the guest is in the AAD (by being in an Office 365 group, at least), then I can add the guest to the Team via the apps. 

 

For AAD, I can add guests and for Office 365 Groups, I have "Let group members outside the organization access group content" enabled.

27 Replies

Sorry if this is a stupid question, but have you turned on the guest access for Teams?

More info: https://docs.microsoft.com/en-us/microsoftteams/set-up-guests 

Yes. I can add guests to a team without issue so long as they're already in the AAD.
You should be able to add guests to Teams without having then in your Azure AD

I'm an admin and have guest access enabled in the tenant. I believe it should work as documented here: https://docs.microsoft.com/en-us/microsoftteams/add-guests. This seems to be a bug within the Teams client. 

Yes, but there is a setting to control non-admin ability.  I missed 'admin experience' from Nick's original message, hence why I posted the link.

What you are describing looks more like an issue with inviting users to your tenant, not the "add Guest to Team part". I can certainly add guests that are not already part of my AAD, did you check all the correct settings are configured as per: https://docs.microsoft.com/en-us/microsoftteams/teams-dependencies

 

 

I'm the tenant admin so I'm not sure what settings you're speaking about. Can you clarify? I have no issue adding guests via Office 365 Groups. What I'm saying is that I can only add guests to Teams after they've been added as guests either through Office 365 Groups or AAD directly. 

The settings are in the article I linked above. And to prove to you that it's possible, here's a screenshot I just made for inviting a user from another tenant. Note the "add as a guest" part:

 

TeamsGuests.png

Thanks for your reply. The link you shared says, "With Azure AD business-to-business (B2B) collaboration, sending invitations to potential guest users isn’t restricted to tenant admins." That means to me that I should have no inherent restrictions to sharing as a tenant admin with Azure B2B. I had already had the flag "Admins and users in the guest inviter role can invite" set to yes.

 

As a test, I enabled "Members can invite" just in case Teams isn't recognizing me as the tenant admin, but that still didn't work. I get the same message, "We didn't find any matches."

 

While I believe it may be working with your tenant, I can tell you it does not work on mine! 

 

Same issue here! clearly a bug!

Same here.. Can't invite guests from the Teams client. All my setting are correct.

Have you checked "Sharing" in Office 365 Admin Portal -> Settings -> Security & privacy. This is a SharePoint Online security setting that needs to be enabled to allow users (such as Team owners) to create guests.

Hi Nick,

 

I'm having the same exact issue here--did you ever find a resolution to this?

 

Thanks

Nope. Same problem exists as described above.

Give it 24 hours for the permissions to propagate. I had to wait a while until it worked.

I worked with Microsoft on this same issue for several hours of the past couple of days and the conclusion was that the following setting needed to be enabled. 


The steps were as follows:

1) Enable this setting
2) Wait for it to push through on the back end (seemed to take 30+ minutes when I attempted--may take more)

3) Attempt to add a guest that doesn't exist on your AAD tenant in Teams

 

Please note that enabling this setting means that any of your Team owners will be able to able to add guests to their Teams just as they do internal users. 

Also if the setting was already enabled you may need to disable, wait 30+ minutes, then re-enable and wait 30+ minutes. It seems it takes some time to process on the back end of things.

Hope this helps.


guest access teams issue.png

Nick did you ever resolve this?  I have the exact same behaviour in my O365 tenant.  Haven't waited 24hrs since I enabled Teams, but it's been several hours since I set it up - checked all the requisite settings in AAD, Teams etc.

I didn't do anything to resolve it but it does appear to work now. 

Thanks - I shall wait for a few days and try again.  

After hours of trying everything w/ support this was the command that fixed it all!!!!

 Set-MsolCompanySettings -UsersPermissionToReadOtherUsersEnabled $True

Dear James,

I have same issue as you all, I'm trying to invite guest to team group, but does not works...

I searched all afternoon into the console, turn things on to guest etc.. still no effect 

I am not windows expert. I understand from your post that I should do things in the powershell stuff, but I just know mac & unix ssh.... could you help with the sequence I should follow to do what the expert recommand ? ( or if you should point me to some tutorial ) I did some research install some module but this is unfamiliar & complex to me...

with many thanks,

Eric

 

finally It seems I succeed to set the command but nothing changed... any suggestion ?

In my case it was simply a matter of time.  After I couldn't get it working initially I gave up.  Tried again a few weeks on and it worked fine.

What some documents linked above fail to mention is that you also need

Settings > Security & privacy > Let users add new guests to the organization

setting enabled in your Admin Center also. And after enabling it wait for at least 24 hours to make sure it is enabled and started working. This will only work for teams created after enabling this setting. Old teams won't allow adding guests.

Thanks you ! This is exactly what happened.

I tried this morning with a fresh Teams Group from scratch. it works.

So. The path to take I believe could be :

Go (ask your admin) into the o365 console.

On the bottom left : select Teams & Skype (console) something like https://admin.teams.microsoft.com/

Find the settings there. Activate the user access and toggle the required option below (since the console is down while I am writing this, I can't be more precise, guide available on line )

Wait... ( the night ? )

Then create a test group and voilà. ( the adding option detect the foreign email address and propose to add it as a guest. You must change the visible name to something more friendly with the edit button before creating the identity )  

Thanks Oleg / Community for all your responses.

Eric

 

Pretty much yes.

 

First you need to enable guest users in Teams. It was possible to do this in regular Admin Center > Settings > Services & add-ins > Teams. Then this setting was grayed out and one had to use PowerShell command. I believe now there is a menu in new Teams and Skype admin center in External access section. This will allow to add existing external users to teams.

 

You also have to enable the setting i have mentioned (Settings > Security & privacy >

Let users add new guests to the organization). This will allow users to add new external users to organization and so to teams as well.

 

Usually it takes an hour or so to get enabled, but it can take longer, and MS usually suggest to wait for 24 hours.

 

Then you should be able to create a new team and add new external users to it.

Related Conversations
Stable version of Edge insider browser
HotCakeX in Discussions on
35 Replies
Tabs and Dark Mode
cjc2112 in Discussions on
33 Replies
Security Community Webinars
Valon_Kolica in Security, Privacy & Compliance on
9 Replies
How to Prevent Teams from Auto-Launch
chenrylee in Microsoft Teams on
29 Replies
flashing a white screen while open new tab
Deleted in Discussions on
14 Replies