SOLVED
Home

Control External Access in Teams

%3CLINGO-SUB%20id%3D%22lingo-sub-242659%22%20slang%3D%22en-US%22%3EControl%20External%20Access%20in%20Teams%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-242659%22%20slang%3D%22en-US%22%3E%3CP%3EI%20have%20spun%20up%20a%20new%20demo%20tenant%20and%20wanted%20to%20enable%20external%20Teams%20access.%20It%20is%20now%20different%20from%20the%20way%20it%20used%20to%20be%20and%20I%20am%20greeted%20by%20this%20when%20I%20try%20and%20enable%20via%20the%20admin%20center%3A%3C%2FP%3E%0A%3CP%3E%26nbsp%3B%3C%2FP%3E%0A%3CP%3E%3CSPAN%20class%3D%22lia-inline-image-display-wrapper%20lia-image-align-inline%22%20style%3D%22width%3A%20400px%3B%22%3E%3CIMG%20src%3D%22https%3A%2F%2Fgxcuf89792.i.lithium.com%2Ft5%2Fimage%2Fserverpage%2Fimage-id%2F44933iE12BC38BFCB71EB8%2Fimage-size%2Fmedium%3Fv%3D1.0%26amp%3Bpx%3D400%22%20alt%3D%22Capture.PNG%22%20title%3D%22Capture.PNG%22%20%2F%3E%3C%2FSPAN%3E%3C%2FP%3E%0A%3CP%3E%26nbsp%3B%3C%2FP%3E%0A%3CP%3ESo%20I%20am%20unable%20to%20set%20the%20option%20here.%20If%20I%20can%20go%20to%20the%20new%20Skype%20and%20Team%20admin%20console%20there%20doesn't%20seem%20to%20be%20an%20equivalent%20setting.%20So%20I%20assume%20that%20external%20users%20are%20enabled.%3C%2FP%3E%0A%3CP%3E%26nbsp%3B%3C%2FP%3E%0A%3CP%3E%3CSPAN%20class%3D%22lia-inline-image-display-wrapper%20lia-image-align-inline%22%20style%3D%22width%3A%20400px%3B%22%3E%3CIMG%20src%3D%22https%3A%2F%2Fgxcuf89792.i.lithium.com%2Ft5%2Fimage%2Fserverpage%2Fimage-id%2F44934iC0A3D27D3CC7947F%2Fimage-size%2Fmedium%3Fv%3D1.0%26amp%3Bpx%3D400%22%20alt%3D%22Capture.PNG%22%20title%3D%22Capture.PNG%22%20%2F%3E%3C%2FSPAN%3E%3C%2FP%3E%0A%3CP%3E%26nbsp%3B%3C%2FP%3E%0A%3CP%3EBut%20nope%2C%20I%20can't%20add%20myself%20as%20an%20external%20user%20to%20the%20Team.%3C%2FP%3E%0A%3CP%3E%26nbsp%3B%3C%2FP%3E%0A%3CP%3EI've%20tried%20all%20sorts%20of%20things%20to%20enable%20this.%20SURELY%2C%20it%20can't%20be%20this%20hard%20to%20now%20enable%20external%20user%20access%20for%20Teams%20can%20it%3F%20Someone%20please%20tell%20me%20what%20I'm%20overlooking%20here.%20PLEASE.%3C%2FP%3E%3C%2FLINGO-BODY%3E%3CLINGO-LABS%20id%3D%22lingo-labs-242659%22%20slang%3D%22en-US%22%3E%3CLINGO-LABEL%3EGuest%20Access%3C%2FLINGO-LABEL%3E%3C%2FLINGO-LABS%3E%3CLINGO-SUB%20id%3D%22lingo-sub-321263%22%20slang%3D%22en-US%22%3ERe%3A%20Control%20External%20Access%20in%20Teams%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-321263%22%20slang%3D%22en-US%22%3ECurrently%20there%20is%20no%20reason%20for%20using%20power%20shell%20to%20enable%20guest%20access.%20You%20can%20do%20it%20all%20via%20GUI%20per%20that%20doc.%3C%2FLINGO-BODY%3E%3CLINGO-SUB%20id%3D%22lingo-sub-321262%22%20slang%3D%22en-US%22%3ERe%3A%20Control%20External%20Access%20in%20Teams%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-321262%22%20slang%3D%22en-US%22%3E%3CP%3EIs%20this%20PowerShell%20cmdlet%20required%20%3CEM%3Ein%20addition%20to%3C%2FEM%3E%20all%20of%20the%20things%20we%20have%20to%20do%3CA%20href%3D%22https%3A%2F%2Fdocs.microsoft.com%2Fen-us%2Fmicrosoftteams%2Fteams-dependencies%22%20target%3D%22_self%22%20rel%3D%22noopener%20noreferrer%20noopener%20noreferrer%22%3E%20in%20this%20doc%3C%2FA%3E%3F%20!%20%3F%3C%2FP%3E%3C%2FLINGO-BODY%3E%3CLINGO-SUB%20id%3D%22lingo-sub-272277%22%20slang%3D%22en-US%22%3ERe%3A%20Control%20External%20Access%20in%20Teams%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-272277%22%20slang%3D%22en-US%22%3E%3CP%3EAnd%20in%20case%20anybody%20is%20looking%20for%20the%20domain-scoping%2C%26nbsp%3B%20that%20seems%20to%20be%20back%20in%20Skype%20under%26nbsp%3BGet-CsTenantFederationConfiguration%3C%2FP%3E%3C%2FLINGO-BODY%3E%3CLINGO-SUB%20id%3D%22lingo-sub-244659%22%20slang%3D%22en-US%22%3ERe%3A%20Control%20External%20Access%20in%20Teams%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-244659%22%20slang%3D%22en-US%22%3E%3CP%3ETo%20make%20it%20easier%20for%20people%20to%20find%20this%20information%2C%20and%20to%20document%20a%20little%20more%20knowledge%2C%20I%20wrote%20this%20blog%3A%3C%2FP%3E%0A%3CP%3E%26nbsp%3B%3C%2FP%3E%0A%3CP%3E%3CSTRONG%3EEnabling%20Access%20to%20Teams%20for%20Guest%20Users%20with%20PowerShell%3C%2FSTRONG%3E%3C%2FP%3E%0A%3CP%3EDuring%20transitions%2C%20things%20sometimes%20don%E2%80%99t%20go%20so%20smoothly.%20Such%20is%20the%20case%20if%20you%20want%20to%20enable%20or%20disable%20guest%20user%20access%20to%20Teams%20and%20find%20that%20the%20setting%20to%20control%20the%20access%20is%20no%20longer%20available%20in%20the%20Office%20365%20Admin%20Center.%20But%20PowerShell%20can%20control%20the%20setting%2C%20so%20that%E2%80%99s%20the%20solution%20to%20the%20problem.%3CBR%20%2F%3E%3CA%20href%3D%22https%3A%2F%2Foffice365foritpros.com%2F2018%2F09%2F07%2Fpowershell-enable-guest-access-teams%2F%22%20target%3D%22_blank%22%20rel%3D%22nofollow%20noopener%20noreferrer%20noopener%20noreferrer%22%3Ehttps%3A%2F%2Foffice365foritpros.com%2F2018%2F09%2F07%2Fpowershell-enable-guest-access-teams%2F%3C%2FA%3E%3C%2FP%3E%3C%2FLINGO-BODY%3E%3CLINGO-SUB%20id%3D%22lingo-sub-244607%22%20slang%3D%22en-US%22%3ERe%3A%20Control%20External%20Access%20in%20Teams%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-244607%22%20slang%3D%22en-US%22%3E%3CP%3EI%20have%20stumbled%20on%20this%20topic%20accidentally%20by%20scrolling%20through.%20Now%20i%20have%20checked%20old%20admin%20GUI%20spot%20and%20it%20is%20not%20active%20for%20us%20also.%20And%20when%20i%20check%20configuration%20it%20says%20that%20AllowGuestUser%20is%20false.%20But%20inviting%20guest%20users%20still%20works%20for%20us.%20Probably%20because%20it%20was%20already%20enabled%20via%20old%20GUI%20control%20a%20few%20months%20ago.%20And%20when%20i%20check%20the%20inactive%20control%2C%20it%20is%20in%20the%20ON%20mode.%20I%20guess%20i%20should%20be%20able%20to%20disable%20it%20via%20PowerShell%20now.%3C%2FP%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3CP%3EMy%20god%20this%20is%20such%20an%20awful%20situation%20with%20all%20this%20migration%20stuff.%20Now%20i%20have%20to%20document%20this%20to%20a%20new%20guy%20as%20im%20leaving%20the%20org%20and%20it%20just%20feels%20so%20messy%20that%20i'm%20embarrassed%20myself..%3C%2FP%3E%3C%2FLINGO-BODY%3E%3CLINGO-SUB%20id%3D%22lingo-sub-244420%22%20slang%3D%22en-US%22%3ERe%3A%20Control%20External%20Access%20in%20Teams%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-244420%22%20slang%3D%22en-US%22%3E%3CP%3EGood%20things%20come%20to%20those%20who%20wait...%3C%2FP%3E%3C%2FLINGO-BODY%3E%3CLINGO-SUB%20id%3D%22lingo-sub-243046%22%20slang%3D%22en-US%22%3ERe%3A%20Control%20External%20Access%20in%20Teams%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-243046%22%20slang%3D%22en-US%22%3E%3CP%3ETo%20close%20this%20thread%3C%2FP%3E%0A%3CP%3E%26nbsp%3B%3C%2FP%3E%0A%3CP%3E%3CSPAN%20class%3D%22lia-inline-image-display-wrapper%20lia-image-align-inline%22%20style%3D%22width%3A%20400px%3B%22%3E%3CIMG%20src%3D%22https%3A%2F%2Fgxcuf89792.i.lithium.com%2Ft5%2Fimage%2Fserverpage%2Fimage-id%2F45006iC68510130756CDE6%2Fimage-size%2Fmedium%3Fv%3D1.0%26amp%3Bpx%3D400%22%20alt%3D%22Capture.PNG%22%20title%3D%22Capture.PNG%22%20%2F%3E%3C%2FSPAN%3E%3C%2FP%3E%0A%3CP%3EAfter%20Tony's%20PowerShell%20and%20enabling%20in%20Admin%20console%20and%20waiting%20about%20an%20hour%2C%20external%20guests%20can%20now%20be%20added.%3C%2FP%3E%0A%3CP%3E%26nbsp%3B%3C%2FP%3E%0A%3CP%3EPhew.%20The%20long%20way%20round%20but%20have%20the%20result%20I'm%20after%20until%20the%20new%20bits%20arrive%20elsewhere.%3C%2FP%3E%3C%2FLINGO-BODY%3E%3CLINGO-SUB%20id%3D%22lingo-sub-243026%22%20slang%3D%22en-US%22%3ERe%3A%20Control%20External%20Access%20in%20Teams%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-243026%22%20slang%3D%22en-US%22%3E%3CP%3EYes.%20And%20soon.%3C%2FP%3E%3C%2FLINGO-BODY%3E%3CLINGO-SUB%20id%3D%22lingo-sub-243023%22%20slang%3D%22en-US%22%3ERe%3A%20Control%20External%20Access%20in%20Teams%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-243023%22%20slang%3D%22en-US%22%3E%3CP%3EYup%2C%20been%20there%20done%20that%20many%20times.%3C%2FP%3E%0A%3CP%3E%26nbsp%3B%3C%2FP%3E%0A%3CP%3EIs%20the%20long%20term%20plan%20to%20have%20the%20external%20enable%20switch%20in%20the%20new%20Teams%20Admin%20center%20I%20assume%3F%3C%2FP%3E%3C%2FLINGO-BODY%3E%3CLINGO-SUB%20id%3D%22lingo-sub-243022%22%20slang%3D%22en-US%22%3ERe%3A%20Control%20External%20Access%20in%20Teams%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-243022%22%20slang%3D%22en-US%22%3EJust%20an%20FYI%2C%20I've%20seen%20this%20setting%20take%20over%2024%20hours%20before%20the%20license%20configuration%20thing%20fully%20populates%20so%20might%20have%20to%20give%20it%20that%20long.%20Hopefully%20not%20thou%20%3AP.%3C%2FLINGO-BODY%3E%3CLINGO-SUB%20id%3D%22lingo-sub-243019%22%20slang%3D%22en-US%22%3ERe%3A%20Control%20External%20Access%20in%20Teams%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-243019%22%20slang%3D%22en-US%22%3E%3CP%3EWeird.%20There%20are%20many%20pieces%20in%20transit%20right%20now%20as%20Microsoft%20moves%20settings%20out%20of%20the%20Office%20365%20Admin%20Center%20to%20the%20Teams%20and%20Skype%20for%20Business%20Online%20Center.%20Just%20accept%20this%20as%20one%20of%20the%20glitches%20that%20you%20might%20expect%20along%20the%20way...%3C%2FP%3E%3C%2FLINGO-BODY%3E%3CLINGO-SUB%20id%3D%22lingo-sub-243018%22%20slang%3D%22en-US%22%3ERe%3A%20Control%20External%20Access%20in%20Teams%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-243018%22%20slang%3D%22en-US%22%3E%3CP%3ENow%20that's%20interesting.%20After%20running%20Tony's%20commands%20I%20still%20couldn't%20add%20the%20use%20via%20Team%20but%20when%20I%20went%20back%20to%20the%20Admin%20console%20I%20can%20now%20enable%20that%20setting%20which%20was%20grayed%20out%20before.%3C%2FP%3E%0A%3CP%3E%3CSPAN%20class%3D%22lia-inline-image-display-wrapper%20lia-image-align-inline%22%20style%3D%22width%3A%20400px%3B%22%3E%3CIMG%20src%3D%22https%3A%2F%2Fgxcuf89792.i.lithium.com%2Ft5%2Fimage%2Fserverpage%2Fimage-id%2F44999i799F43CB82164523%2Fimage-size%2Fmedium%3Fv%3D1.0%26amp%3Bpx%3D400%22%20alt%3D%22Capture.PNG%22%20title%3D%22Capture.PNG%22%20%2F%3E%3C%2FSPAN%3E%3C%2FP%3E%0A%3CP%3ESo%20Tony's%20setting%20doesn't%20enable%20it%20for%20me%20it%20simply%20allows%20me%20to%20go%20and%20set%20it%20in%20the%20admin%20console%20per%20the%20documentation.%3C%2FP%3E%0A%3CP%3E%26nbsp%3B%3C%2FP%3E%0A%3CP%3EI%20still%20can't%20add%20externals%20just%20yet%20but%20things%20are%20looking%20up%20and%20I%20might%20have%20to%20give%20it%20a%20few%20minutes.%3C%2FP%3E%3C%2FLINGO-BODY%3E%3CLINGO-SUB%20id%3D%22lingo-sub-243015%22%20slang%3D%22en-US%22%3ERe%3A%20Control%20External%20Access%20in%20Teams%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-243015%22%20slang%3D%22en-US%22%3E%3CP%3EJust%20wait%20a%20while.%20Teams%20caches%20configuration%20data%20for%20performance%20reasons.%20I%20guess%20you%20could%20remove%20the%20Teams%20cache%20from%20the%20PC%20and%20force%20it%20to%20rebuild%20on%20a%20restart.%3C%2FP%3E%3C%2FLINGO-BODY%3E%3CLINGO-SUB%20id%3D%22lingo-sub-243014%22%20slang%3D%22en-US%22%3ERe%3A%20Control%20External%20Access%20in%20Teams%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-243014%22%20slang%3D%22en-US%22%3E%3CP%3EStill%20doesn't%20make%20any%20different%20for%20me%20after%20running%20command.%20Maybe%20I%20need%20to%20give%20a%20little%20while%20to%20flow%20through%20system%3F%3C%2FP%3E%0A%3CP%3E%26nbsp%3B%3C%2FP%3E%0A%3CP%3EI'll%20report%20back%20if%20it%20still%20doesn't%20work.%3C%2FP%3E%3C%2FLINGO-BODY%3E%3CLINGO-SUB%20id%3D%22lingo-sub-243013%22%20slang%3D%22en-US%22%3ERe%3A%20Control%20External%20Access%20in%20Teams%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-243013%22%20slang%3D%22en-US%22%3E%3CP%3EYou'll%20get%20the%20next%20one...%3C%2FP%3E%3C%2FLINGO-BODY%3E%3CLINGO-SUB%20id%3D%22lingo-sub-243011%22%20slang%3D%22en-US%22%3ERe%3A%20Control%20External%20Access%20in%20Teams%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-243011%22%20slang%3D%22en-US%22%3EDang%2C%20I%20was%20looking%20at%20that%20setting%20earlier%20too%2C%20so%20close%20lol!%3C%2FLINGO-BODY%3E%3CLINGO-SUB%20id%3D%22lingo-sub-243002%22%20slang%3D%22en-US%22%3ERe%3A%20Control%20External%20Access%20in%20Teams%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-243002%22%20slang%3D%22en-US%22%3EAwesome%20Tony!%3C%2FLINGO-BODY%3E%3CLINGO-SUB%20id%3D%22lingo-sub-242999%22%20slang%3D%22en-US%22%3ERe%3A%20Control%20External%20Access%20in%20Teams%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-242999%22%20slang%3D%22en-US%22%3E%3CP%3EHere's%20the%20answer.%20The%20S%3CA%20href%3D%22https%3A%2F%2Fdocs.microsoft.com%2Fen-us%2Fpowershell%2Fmodule%2Fskype%2Fset-csteamsclientconfiguration%3Fview%3Dskype-ps%22%20target%3D%22_blank%22%20rel%3D%22noopener%20noreferrer%20noopener%20noreferrer%22%3Eet-CSTeamsClientConfiguration%3C%2FA%3E%20cmdlet%20controls%20the%20setting%3C%2FP%3E%0A%3CP%3E%26nbsp%3B%3C%2FP%3E%0A%3CP%3EFirst%2C%20download%20the%20Skype%20for%20Business%20Online%20PowerShell%20module%20from%26nbsp%3B%3CA%20href%3D%22https%3A%2F%2Fwww.microsoft.com%2Fen-us%2Fdownload%2Fdetails.aspx%3Fid%3D39366%22%20target%3D%22_blank%22%20rel%3D%22noopener%20noreferrer%20noopener%20noreferrer%22%3Ehttps%3A%2F%2Fwww.microsoft.com%2Fen-us%2Fdownload%2Fdetails.aspx%3Fid%3D39366%3C%2FA%3E%3C%2FP%3E%0A%3CP%3E%26nbsp%3B%3C%2FP%3E%0A%3CP%3ENow%2C%20connect%20a%20PowerShell%20session%20to%20the%20Skype%20for%20Business%20Online%20endpoint.%3C%2FP%3E%0A%3CPRE%3EImport-Module%20SkypeOnlineConnector%0A%24Cred%20%3D%20Get-Credential%0A%24CSSession%20%3D%20New-CsOnlineSession%20-Credential%20%24Cred%0AImport-PSSession%20-Session%20%24CSSession%0A%0A%3C%2FPRE%3E%0A%3CP%3ECheck%20your%20configuration%20and%20if%20AllowGuestUser%20is%20%24False%2C%20set%20it%20to%20%24True%20by%20running%20the%20Set-CsTeamsClientConfiguration%20cmdlet%3A%3C%2FP%3E%0A%3CPRE%3EGet-CsTeamsClientConfiguration%0A%0AIdentity%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%3A%20Global%0AAllowEmailIntoChannel%20%20%20%20%20%20%20%20%20%20%20%20%3A%20True%0ARestrictedSenderList%20%20%20%20%20%20%20%20%20%20%20%20%20%3A%0AAllowDropBox%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%3A%20True%0AAllowBox%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%3A%20True%0AAllowGoogleDrive%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%3A%20True%0AAllowShareFile%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%3A%20True%0AAllowOrganizationTab%20%20%20%20%20%20%20%20%20%20%20%20%20%3A%20True%0AAllowSkypeBusinessInterop%20%20%20%20%20%20%20%20%3A%20True%0AAllowTBotProactiveMessaging%20%20%20%20%20%20%3A%20False%0AContentPin%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%3A%20RequiredOutsideScheduleMeeting%0AAllowResourceAccountSendMessage%20%20%3A%20True%0AResourceAccountContentAccess%20%20%20%20%20%3A%20NoAccess%0AAllowGuestUser%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%3A%20True%0AAllowScopedPeopleSearchandAccess%20%3A%20False%3CBR%20%2F%3E%0ASet-CsTeamsClientConfiguration%20-AllowGuestUser%20%24True%20-Identity%20Global%3C%2FPRE%3E%0A%3CP%3EYou%20should%20now%20have%20guest%20user%20support%20in%20Teams%20in%20your%20tenant.%3C%2FP%3E%3C%2FLINGO-BODY%3E%3CLINGO-SUB%20id%3D%22lingo-sub-242978%22%20slang%3D%22en-US%22%3ERe%3A%20Control%20External%20Access%20in%20Teams%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-242978%22%20slang%3D%22en-US%22%3E%3CP%3EI%20am%20trying%20to%20express%20the%20pain%20that%20end%20users%20are%20feeling%20with%20this.%20They%20are%20coming%20to%20me%20unable%20to%20do%20what%20the%20docs%20say%20and%20there%20doesn't%20seem%20to%20be%20an%20option%20to%20easily%20overcome%20this.%3C%2FP%3E%0A%3CP%3E%26nbsp%3B%3C%2FP%3E%0A%3CP%3EIf%20all%20the%20docs%20point%20to%20something%20that%20doesn't%20work%20or%20isn't%20possible%20where%20do%20you%20go%20to%20let%20the%20actual%20Teams%20PG%20know%3F%20You%20come%20hear%20and%20hopefully%20someone%20like%20Tony%20with%20his%20connections%20let%20the%20right%20people%20know%20and%20it%20gets%20fixed.%20In%20the%20meantime%20people%20can't%20enable%20external%20access%20for%20Teams%20and%20that%20is%20very%20frustrating%20for%20them%20and%20their%20IT%20support.%20It%20makes%20the%20product%20look%20bad%20when%20it%20shouldn't.%3C%2FP%3E%0A%3CP%3E%26nbsp%3B%3C%2FP%3E%0A%3CP%3EThat%20in%20end%20affects%20the%20product%20and%20its%20adoption%20by%20users.%3C%2FP%3E%0A%3CP%3E%26nbsp%3B%3C%2FP%3E%0A%3CP%3EIn%20short%2C%20I'm%20trying%20to%20communicate%20that%20not%20having%20a%20simple%20method%20of%20enabling%20external%20access%20for%20Teams%20is%20a%20big%20issue%20and%20affecting%20quite%20a%20few%20people%20I'm%20working%20with%20right%20now.%20Not%20having%20an%20answer%20for%20them%20is%20extremely%20frustrating%2C%20especially%20based%20on%20the%20docs%20and%20guidance%20out%20there.%3C%2FP%3E%3C%2FLINGO-BODY%3E%3CLINGO-SUB%20id%3D%22lingo-sub-242976%22%20slang%3D%22en-US%22%3ERe%3A%20Control%20External%20Access%20in%20Teams%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-242976%22%20slang%3D%22en-US%22%3ENo%20one%20is%20arguing%20against%20you%20here%2C%20dunno%20why%20you're%20getting%20so%20worked%20up%20about%20it%20to%20us%20%3AP.%20I'm%20sure%20it%20was%20an%20oversight%20in%20the%20Admin%20experience%20migration%20and%20they%20will%20add%20a%20flag%20on%20the%20new%20one%2C%20but%20we%20def.%20need%20a%20work%20around%20if%20this%20is%20the%20case%20of%20it%20not%20working.%3C%2FLINGO-BODY%3E%3CLINGO-SUB%20id%3D%22lingo-sub-242975%22%20slang%3D%22en-US%22%3ERe%3A%20Control%20External%20Access%20in%20Teams%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-242975%22%20slang%3D%22en-US%22%3E%3CP%3EThere%20ain't%20a%20one%20liner%20this%20in%20PowerShell.%20You%20have%20to%20jump%20some%20real%20hoops%20to%20even%20get%20close%20with%20PowerShell.%3C%2FP%3E%0A%3CP%3E%26nbsp%3B%3C%2FP%3E%0A%3CP%3EThis%20is%20not%20and%20should%20not%20be%20the%20case%20for%20the%20average%20Joe%20or%20Jane.%20External%20access%20is%20a%20critical%20piece%20of%20this%20service%20and%20if%20all%20the%20docs%20are%20wrong%20and%20it%20can%20only%20be%20done%20by%20some%20convoluted%20PowerShell%20then%20adoption%20of%20Teams%20will%20drop%20to%20next%20to%20zero.%20It%20has%20to%20be%20SIMPLE%20for%20the%20'normals'%20to%20enable%20Teams%20externals%20access.%3C%2FP%3E%3C%2FLINGO-BODY%3E%3CLINGO-SUB%20id%3D%22lingo-sub-242972%22%20slang%3D%22en-US%22%3ERe%3A%20Control%20External%20Access%20in%20Teams%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-242972%22%20slang%3D%22en-US%22%3EYeah%2C%20it%20used%20to%20be%20easy%2C%20now%20that%20the%20option%20is%20gone%2C%20the%20question%20is%20where%20does%20that%20old%20toggle%20flag%20update%20on%20the%20back%20end%20%3AP.%20Cause%20unless%20it%20turns%20itself%20on%20by%20default%2C%20there%20has%20to%20be%20somewhere%20to%20enable.%3CBR%20%2F%3E%3CBR%20%2F%3ERead%20on%20the%20docs.microsoft%20comments%20others%20having%20same%20issues.%20One%20person%20said%20they%20were%20told%20the%20guest%20setting%20should%20be%20on%20by%20default%20now%2C%20but%20apparently%20it%20isn't.%20But%20IMO%20that%20could%20be%20a%20bad%20thing%20if%20they%20did%20do%20that%20as%20well%20%3A).%20Hoping%20for%20a%20Powershell%20method%20to%20accomplish%20this.%3C%2FLINGO-BODY%3E%3CLINGO-SUB%20id%3D%22lingo-sub-242961%22%20slang%3D%22en-US%22%3ERe%3A%20Control%20External%20Access%20in%20Teams%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-242961%22%20slang%3D%22en-US%22%3E%3CP%3EThe%20question%20about%20what%20might%20be%20going%20on%20here%20has%20been%20asked%20of%20the%20Teams%20PG.%20Stay%20tuned.%20Hopefully%2C%20we%20will%20have%20an%20answer%20soon.%3C%2FP%3E%3C%2FLINGO-BODY%3E%3CLINGO-SUB%20id%3D%22lingo-sub-242958%22%20slang%3D%22en-US%22%3ERe%3A%20Control%20External%20Access%20in%20Teams%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-242958%22%20slang%3D%22en-US%22%3E%3CP%3E%3CSPAN%20class%3D%22lia-inline-image-display-wrapper%20lia-image-align-inline%22%20style%3D%22width%3A%20400px%3B%22%3E%3CIMG%20src%3D%22https%3A%2F%2Fgxcuf89792.i.lithium.com%2Ft5%2Fimage%2Fserverpage%2Fimage-id%2F44994iB45D66B32203719F%2Fimage-size%2Fmedium%3Fv%3D1.0%26amp%3Bpx%3D400%22%20alt%3D%22Capture.PNG%22%20title%3D%22Capture.PNG%22%20%2F%3E%3C%2FSPAN%3E%3C%2FP%3E%0A%3CP%3EAll%20set%20to%20share%20yet....%3C%2FP%3E%3C%2FLINGO-BODY%3E%3CLINGO-SUB%20id%3D%22lingo-sub-242949%22%20slang%3D%22en-US%22%3ERe%3A%20Control%20External%20Access%20in%20Teams%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-242949%22%20slang%3D%22en-US%22%3E%3CP%3EExternal%20access%20is%20enabled%20everywhere%20I%20can%20see.%3C%2FP%3E%0A%3CP%3E%26nbsp%3B%3C%2FP%3E%0A%3CP%3E%3CSPAN%20class%3D%22lia-inline-image-display-wrapper%20lia-image-align-inline%22%20style%3D%22width%3A%20392px%3B%22%3E%3CIMG%20src%3D%22https%3A%2F%2Fgxcuf89792.i.lithium.com%2Ft5%2Fimage%2Fserverpage%2Fimage-id%2F44985iEF9E64F8BF49F34F%2Fimage-size%2Fmedium%3Fv%3D1.0%26amp%3Bpx%3D400%22%20alt%3D%22Capture.PNG%22%20title%3D%22Capture.PNG%22%20%2F%3E%3C%2FSPAN%3E%3C%2FP%3E%0A%3CP%3Eand%3C%2FP%3E%0A%3CP%3E%3CSPAN%20class%3D%22lia-inline-image-display-wrapper%20lia-image-align-inline%22%20style%3D%22width%3A%20400px%3B%22%3E%3CIMG%20src%3D%22https%3A%2F%2Fgxcuf89792.i.lithium.com%2Ft5%2Fimage%2Fserverpage%2Fimage-id%2F44986i51AC31BD03A60108%2Fimage-size%2Fmedium%3Fv%3D1.0%26amp%3Bpx%3D400%22%20alt%3D%22Capture.PNG%22%20title%3D%22Capture.PNG%22%20%2F%3E%3C%2FSPAN%3E%3C%2FP%3E%0A%3CP%3Eand%3C%2FP%3E%0A%3CP%3E%3CSPAN%20class%3D%22lia-inline-image-display-wrapper%20lia-image-align-inline%22%20style%3D%22width%3A%20400px%3B%22%3E%3CIMG%20src%3D%22https%3A%2F%2Fgxcuf89792.i.lithium.com%2Ft5%2Fimage%2Fserverpage%2Fimage-id%2F44987i0E02DEF5DB06F5FB%2Fimage-size%2Fmedium%3Fv%3D1.0%26amp%3Bpx%3D400%22%20alt%3D%22Capture.PNG%22%20title%3D%22Capture.PNG%22%20%2F%3E%3C%2FSPAN%3E%3C%2FP%3E%0A%3CP%3EIt%20should%20not%20be%20this%20hard!%20Also%20all%20the%20MS%20docs%20point%20to%20stuff%20that%20is%20now%20grayed%20out.%26nbsp%3B%3C%2FP%3E%0A%3CP%3EIt%20is%20also%20not%20only%20me%20seeing%20this.%3C%2FP%3E%0A%3CP%3E%26nbsp%3B%3C%2FP%3E%3C%2FLINGO-BODY%3E%3CLINGO-SUB%20id%3D%22lingo-sub-242810%22%20slang%3D%22en-US%22%3ERe%3A%20Control%20External%20Access%20in%20Teams%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-242810%22%20slang%3D%22en-US%22%3E%3CP%3EDoes%20Azure%20AD%20allow%20guest%20access%3F%3C%2FP%3E%0A%3CP%3E%26nbsp%3B%3C%2FP%3E%0A%3CP%3EDoes%20the%20Office%20365%20Groups%20setting%20in%20the%20Office%20365%20Admin%20Center%20allow%20guest%20access%3F%3C%2FP%3E%0A%3CP%3E%3CSPAN%20class%3D%22lia-inline-image-display-wrapper%20lia-image-align-inline%22%20style%3D%22width%3A%20860px%3B%22%3E%3CIMG%20src%3D%22https%3A%2F%2Fgxcuf89792.i.lithium.com%2Ft5%2Fimage%2Fserverpage%2Fimage-id%2F44958i5FFD84B7F38F2E75%2Fimage-size%2Flarge%3Fv%3D1.0%26amp%3Bpx%3D999%22%20alt%3D%22GuestAccess.jpg%22%20title%3D%22GuestAccess.jpg%22%20%2F%3E%3C%2FSPAN%3E%3C%2FP%3E%3C%2FLINGO-BODY%3E%3CLINGO-SUB%20id%3D%22lingo-sub-242733%22%20slang%3D%22en-US%22%3ERe%3A%20Control%20External%20Access%20in%20SFB%20Online%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-242733%22%20slang%3D%22en-US%22%3EBut%20in%20the%20new%20Teams%20%26amp%3B%20Skype%20Admin%20Center%20I'm%20not%20seeing%20a%20explicit%20option%20to%20enable%20Guests%20access%20to%20Teams...something%20is%20not%20correct%3C%2FLINGO-BODY%3E%3CLINGO-SUB%20id%3D%22lingo-sub-242718%22%20slang%3D%22en-US%22%3ERe%3A%20Control%20External%20Access%20in%20SFB%20Online%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-242718%22%20slang%3D%22en-US%22%3EThe%20new%20admin%20center%20has%20guest%20access%20tab.%20Make%20sure%20that%20is%20on%20but%20you%20also%20need%20to%20make%20sure%20that%20under%20365%20admin%20page%20in%20settings%20%26gt%3B%20office%20365%20groups%20you%20also%20have%20it%20allowed%20to%20add%20external%20users%20to%20this%20as%20well.%3C%2FLINGO-BODY%3E%3CLINGO-SUB%20id%3D%22lingo-sub-242662%22%20slang%3D%22en-US%22%3ERe%3A%20Control%20External%20Access%20in%20SFB%20Online%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-242662%22%20slang%3D%22en-US%22%3E%3CP%3Eand%20this%20document%20says%20to%20do%20it%20the%20old%20way%20which%20clearly%20doesn't%20work%20any%20more%3A%3C%2FP%3E%0A%3CP%3E%26nbsp%3B%3C%2FP%3E%0A%3CP%3E%3CA%20href%3D%22https%3A%2F%2Fdocs.microsoft.com%2Fen-us%2Fmicrosoftteams%2Fset-up-guests%22%20target%3D%22_blank%22%20rel%3D%22noopener%20noreferrer%20noopener%20noreferrer%22%3Ehttps%3A%2F%2Fdocs.microsoft.com%2Fen-us%2Fmicrosoftteams%2Fset-up-guests%3C%2FA%3E%3C%2FP%3E%0A%3CP%3E%26nbsp%3B%3C%2FP%3E%0A%3CP%3Ethese%20inconsistencies%2C%20especially%20for%20things%20like%20Guest%20Access%20really%20p*ss%20people%20off%20since%20it%20should%20be%20much%20easier%20to%20get%20external%20users%20into%20a%20Team.%3C%2FP%3E%3C%2FLINGO-BODY%3E
Highlighted
Robert Crane
MVP

I have spun up a new demo tenant and wanted to enable external Teams access. It is now different from the way it used to be and I am greeted by this when I try and enable via the admin center:

 

Capture.PNG

 

So I am unable to set the option here. If I can go to the new Skype and Team admin console there doesn't seem to be an equivalent setting. So I assume that external users are enabled.

 

Capture.PNG

 

But nope, I can't add myself as an external user to the Team.

 

I've tried all sorts of things to enable this. SURELY, it can't be this hard to now enable external user access for Teams can it? Someone please tell me what I'm overlooking here. PLEASE.

29 Replies

and this document says to do it the old way which clearly doesn't work any more:

 

https://docs.microsoft.com/en-us/microsoftteams/set-up-guests

 

these inconsistencies, especially for things like Guest Access really p*ss people off since it should be much easier to get external users into a Team.

The new admin center has guest access tab. Make sure that is on but you also need to make sure that under 365 admin page in settings > office 365 groups you also have it allowed to add external users to this as well.
But in the new Teams & Skype Admin Center I'm not seeing a explicit option to enable Guests access to Teams...something is not correct

Does Azure AD allow guest access?

 

Does the Office 365 Groups setting in the Office 365 Admin Center allow guest access?

GuestAccess.jpg

External access is enabled everywhere I can see.

 

Capture.PNG

and

Capture.PNG

and

Capture.PNG

It should not be this hard! Also all the MS docs point to stuff that is now grayed out. 

It is also not only me seeing this.

 

Capture.PNG

All set to share yet....

The question about what might be going on here has been asked of the Teams PG. Stay tuned. Hopefully, we will have an answer soon.

Yeah, it used to be easy, now that the option is gone, the question is where does that old toggle flag update on the back end :P. Cause unless it turns itself on by default, there has to be somewhere to enable.

Read on the docs.microsoft comments others having same issues. One person said they were told the guest setting should be on by default now, but apparently it isn't. But IMO that could be a bad thing if they did do that as well :). Hoping for a Powershell method to accomplish this.

There ain't a one liner this in PowerShell. You have to jump some real hoops to even get close with PowerShell.

 

This is not and should not be the case for the average Joe or Jane. External access is a critical piece of this service and if all the docs are wrong and it can only be done by some convoluted PowerShell then adoption of Teams will drop to next to zero. It has to be SIMPLE for the 'normals' to enable Teams externals access.

No one is arguing against you here, dunno why you're getting so worked up about it to us :P. I'm sure it was an oversight in the Admin experience migration and they will add a flag on the new one, but we def. need a work around if this is the case of it not working.

I am trying to express the pain that end users are feeling with this. They are coming to me unable to do what the docs say and there doesn't seem to be an option to easily overcome this.

 

If all the docs point to something that doesn't work or isn't possible where do you go to let the actual Teams PG know? You come hear and hopefully someone like Tony with his connections let the right people know and it gets fixed. In the meantime people can't enable external access for Teams and that is very frustrating for them and their IT support. It makes the product look bad when it shouldn't.

 

That in end affects the product and its adoption by users.

 

In short, I'm trying to communicate that not having a simple method of enabling external access for Teams is a big issue and affecting quite a few people I'm working with right now. Not having an answer for them is extremely frustrating, especially based on the docs and guidance out there.

Solution

Here's the answer. The Set-CSTeamsClientConfiguration cmdlet controls the setting

 

First, download the Skype for Business Online PowerShell module from https://www.microsoft.com/en-us/download/details.aspx?id=39366

 

Now, connect a PowerShell session to the Skype for Business Online endpoint.

Import-Module SkypeOnlineConnector
$Cred = Get-Credential
$CSSession = New-CsOnlineSession -Credential $Cred
Import-PSSession -Session $CSSession

Check your configuration and if AllowGuestUser is $False, set it to $True by running the Set-CsTeamsClientConfiguration cmdlet:

Get-CsTeamsClientConfiguration

Identity                         : Global
AllowEmailIntoChannel            : True
RestrictedSenderList             :
AllowDropBox                     : True
AllowBox                         : True
AllowGoogleDrive                 : True
AllowShareFile                   : True
AllowOrganizationTab             : True
AllowSkypeBusinessInterop        : True
AllowTBotProactiveMessaging      : False
ContentPin                       : RequiredOutsideScheduleMeeting
AllowResourceAccountSendMessage  : True
ResourceAccountContentAccess     : NoAccess
AllowGuestUser                   : True
AllowScopedPeopleSearchandAccess : False
Set-CsTeamsClientConfiguration -AllowGuestUser $True -Identity Global

You should now have guest user support in Teams in your tenant.

Awesome Tony!
Dang, I was looking at that setting earlier too, so close lol!

You'll get the next one...

Still doesn't make any different for me after running command. Maybe I need to give a little while to flow through system?

 

I'll report back if it still doesn't work.

Just wait a while. Teams caches configuration data for performance reasons. I guess you could remove the Teams cache from the PC and force it to rebuild on a restart.

Now that's interesting. After running Tony's commands I still couldn't add the use via Team but when I went back to the Admin console I can now enable that setting which was grayed out before.

Capture.PNG

So Tony's setting doesn't enable it for me it simply allows me to go and set it in the admin console per the documentation.

 

I still can't add externals just yet but things are looking up and I might have to give it a few minutes.

Weird. There are many pieces in transit right now as Microsoft moves settings out of the Office 365 Admin Center to the Teams and Skype for Business Online Center. Just accept this as one of the glitches that you might expect along the way...

Just an FYI, I've seen this setting take over 24 hours before the license configuration thing fully populates so might have to give it that long. Hopefully not thou :P.

Yup, been there done that many times.

 

Is the long term plan to have the external enable switch in the new Teams Admin center I assume?

Yes. And soon.

To close this thread

 

Capture.PNG

After Tony's PowerShell and enabling in Admin console and waiting about an hour, external guests can now be added.

 

Phew. The long way round but have the result I'm after until the new bits arrive elsewhere.

Good things come to those who wait...

I have stumbled on this topic accidentally by scrolling through. Now i have checked old admin GUI spot and it is not active for us also. And when i check configuration it says that AllowGuestUser is false. But inviting guest users still works for us. Probably because it was already enabled via old GUI control a few months ago. And when i check the inactive control, it is in the ON mode. I guess i should be able to disable it via PowerShell now.

 

My god this is such an awful situation with all this migration stuff. Now i have to document this to a new guy as im leaving the org and it just feels so messy that i'm embarrassed myself..

To make it easier for people to find this information, and to document a little more knowledge, I wrote this blog:

 

Enabling Access to Teams for Guest Users with PowerShell

During transitions, things sometimes don’t go so smoothly. Such is the case if you want to enable or disable guest user access to Teams and find that the setting to control the access is no longer available in the Office 365 Admin Center. But PowerShell can control the setting, so that’s the solution to the problem.
https://office365foritpros.com/2018/09/07/powershell-enable-guest-access-teams/

And in case anybody is looking for the domain-scoping,  that seems to be back in Skype under Get-CsTenantFederationConfiguration

Is this PowerShell cmdlet required in addition to all of the things we have to do in this doc? ! ?

Currently there is no reason for using power shell to enable guest access. You can do it all via GUI per that doc.