09-06-2018 05:33 AM - edited 09-06-2018 05:42 AM
09-06-2018 05:33 AM - edited 09-06-2018 05:42 AM
I have spun up a new demo tenant and wanted to enable external Teams access. It is now different from the way it used to be and I am greeted by this when I try and enable via the admin center:
So I am unable to set the option here. If I can go to the new Skype and Team admin console there doesn't seem to be an equivalent setting. So I assume that external users are enabled.
But nope, I can't add myself as an external user to the Team.
I've tried all sorts of things to enable this. SURELY, it can't be this hard to now enable external user access for Teams can it? Someone please tell me what I'm overlooking here. PLEASE.
09-06-2018 05:35 AM
and this document says to do it the old way which clearly doesn't work any more:
these inconsistencies, especially for things like Guest Access really p*ss people off since it should be much easier to get external users into a Team.
09-06-2018 06:40 AM
09-06-2018 07:05 AM
09-06-2018 08:59 AM
Does Azure AD allow guest access?
Does the Office 365 Groups setting in the Office 365 Admin Center allow guest access?
09-06-2018 01:28 PM
External access is enabled everywhere I can see.
It should not be this hard! Also all the MS docs point to stuff that is now grayed out.
It is also not only me seeing this.
09-06-2018 01:37 PM
The question about what might be going on here has been asked of the Teams PG. Stay tuned. Hopefully, we will have an answer soon.
09-06-2018 01:55 PM
09-06-2018 01:59 PM
There ain't a one liner this in PowerShell. You have to jump some real hoops to even get close with PowerShell.
This is not and should not be the case for the average Joe or Jane. External access is a critical piece of this service and if all the docs are wrong and it can only be done by some convoluted PowerShell then adoption of Teams will drop to next to zero. It has to be SIMPLE for the 'normals' to enable Teams externals access.
09-06-2018 02:00 PM
09-06-2018 02:07 PM
I am trying to express the pain that end users are feeling with this. They are coming to me unable to do what the docs say and there doesn't seem to be an option to easily overcome this.
If all the docs point to something that doesn't work or isn't possible where do you go to let the actual Teams PG know? You come hear and hopefully someone like Tony with his connections let the right people know and it gets fixed. In the meantime people can't enable external access for Teams and that is very frustrating for them and their IT support. It makes the product look bad when it shouldn't.
That in end affects the product and its adoption by users.
In short, I'm trying to communicate that not having a simple method of enabling external access for Teams is a big issue and affecting quite a few people I'm working with right now. Not having an answer for them is extremely frustrating, especially based on the docs and guidance out there.
09-06-2018 02:48 PMSolution
Here's the answer. The Set-CSTeamsClientConfiguration cmdlet controls the setting
First, download the Skype for Business Online PowerShell module from https://www.microsoft.com/en-us/download/details.aspx?id=39366
Now, connect a PowerShell session to the Skype for Business Online endpoint.
Import-Module SkypeOnlineConnector $Cred = Get-Credential $CSSession = New-CsOnlineSession -Credential $Cred Import-PSSession -Session $CSSession
Check your configuration and if AllowGuestUser is $False, set it to $True by running the Set-CsTeamsClientConfiguration cmdlet:
Get-CsTeamsClientConfiguration Identity : Global AllowEmailIntoChannel : True RestrictedSenderList : AllowDropBox : True AllowBox : True AllowGoogleDrive : True AllowShareFile : True AllowOrganizationTab : True AllowSkypeBusinessInterop : True AllowTBotProactiveMessaging : False ContentPin : RequiredOutsideScheduleMeeting AllowResourceAccountSendMessage : True ResourceAccountContentAccess : NoAccess AllowGuestUser : True AllowScopedPeopleSearchandAccess : False
Set-CsTeamsClientConfiguration -AllowGuestUser $True -Identity Global
You should now have guest user support in Teams in your tenant.
09-06-2018 03:10 PM
Still doesn't make any different for me after running command. Maybe I need to give a little while to flow through system?
I'll report back if it still doesn't work.
09-06-2018 03:12 PM
Just wait a while. Teams caches configuration data for performance reasons. I guess you could remove the Teams cache from the PC and force it to rebuild on a restart.
09-06-2018 03:17 PM
Now that's interesting. After running Tony's commands I still couldn't add the use via Team but when I went back to the Admin console I can now enable that setting which was grayed out before.
So Tony's setting doesn't enable it for me it simply allows me to go and set it in the admin console per the documentation.
I still can't add externals just yet but things are looking up and I might have to give it a few minutes.
09-06-2018 03:19 PM
Weird. There are many pieces in transit right now as Microsoft moves settings out of the Office 365 Admin Center to the Teams and Skype for Business Online Center. Just accept this as one of the glitches that you might expect along the way...
09-06-2018 03:30 PM
09-06-2018 03:32 PM
Yup, been there done that many times.
Is the long term plan to have the external enable switch in the new Teams Admin center I assume?
09-06-2018 04:36 PM
To close this thread
After Tony's PowerShell and enabling in Admin console and waiting about an hour, external guests can now be added.
Phew. The long way round but have the result I'm after until the new bits arrive elsewhere.
09-07-2018 03:06 AM
I have stumbled on this topic accidentally by scrolling through. Now i have checked old admin GUI spot and it is not active for us also. And when i check configuration it says that AllowGuestUser is false. But inviting guest users still works for us. Probably because it was already enabled via old GUI control a few months ago. And when i check the inactive control, it is in the ON mode. I guess i should be able to disable it via PowerShell now.
My god this is such an awful situation with all this migration stuff. Now i have to document this to a new guy as im leaving the org and it just feels so messy that i'm embarrassed myself..
09-07-2018 03:13 AM
To make it easier for people to find this information, and to document a little more knowledge, I wrote this blog:
Enabling Access to Teams for Guest Users with PowerShell
During transitions, things sometimes don’t go so smoothly. Such is the case if you want to enable or disable guest user access to Teams and find that the setting to control the access is no longer available in the Office 365 Admin Center. But PowerShell can control the setting, so that’s the solution to the problem.
10-16-2018 01:18 PM - edited 10-17-2018 01:55 PM
And in case anybody is looking for the domain-scoping, that seems to be back in Skype under Get-CsTenantFederationConfiguration
01-19-2019 02:51 PM