SOLVED

Best practice to add guest to AAD?

%3CLINGO-SUB%20id%3D%22lingo-sub-300665%22%20slang%3D%22en-US%22%3EBest%20practice%20to%20add%20guest%20to%20AAD%3F%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-300665%22%20slang%3D%22en-US%22%3E%3CP%3EI%20could%20give%20a%20guest%20access%20to%20SPO%20directly%20from%20the%20site's%20permissions%20settings%2C%20and%20I%20could%20give%20a%20guest%20access%20to%20Teams%20directly%20from%20the%20Teams%20interface%20(at%20least%20in%20a%20channel%2C%20if%20not%20in%20chat).%20Is%20there%20any%20reason%20not%20to%20first%20register%20the%20guest(s)%20in%20AAD%3F%3C%2FP%3E%3C%2FLINGO-BODY%3E%3CLINGO-LABS%20id%3D%22lingo-labs-300665%22%20slang%3D%22en-US%22%3E%3CLINGO-LABEL%3EAzure%20AD%3C%2FLINGO-LABEL%3E%3C%2FLINGO-LABS%3E%3CLINGO-SUB%20id%3D%22lingo-sub-354151%22%20slang%3D%22en-US%22%3ERe%3A%20Best%20practice%20to%20add%20guest%20to%20AAD%3F%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-354151%22%20slang%3D%22en-US%22%3EThanks%20for%20the%20tip.%20Very%20helpful!%3C%2FLINGO-BODY%3E%3CLINGO-SUB%20id%3D%22lingo-sub-306920%22%20slang%3D%22en-US%22%3ERe%3A%20Best%20practice%20to%20add%20guest%20to%20AAD%3F%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-306920%22%20slang%3D%22en-US%22%3E%3CP%3EThat's%20not%20true%2C%20if%20you%20chat%20with%20your%20%22Guest%22%20account%2C%20then%20they%20have%20to%20tenant%20switch.%20If%20you%20use%20federation%2C%20it%20goes%20straight%20to%20their%20tenant%20chat%20tab.%20it's%20a%20split%20that%20would%20be%20nice%20if%20they%20can%20consolidate%20it%20someday.%3C%2FP%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3CP%3EBut%20again%2C%20it%20depends%20on%20how%20the%20account%20is%20setup%2C%20if%20they%20are%20actually%20invited%20to%20Teams%2C%20and%20a%20guest%20account%20is%20tied%20to%20that%2C%20then%20they%20have%20to%20switch%2C%20otherwise%20it's%20using%20federation.%26nbsp%3B%3C%2FP%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3CP%3EBut%20as%20you%20can%20see%2C%20it's%20all%20confusing%20%3A)%3C%2Fimg%3E%3C%2FP%3E%3C%2FLINGO-BODY%3E%3CLINGO-SUB%20id%3D%22lingo-sub-306919%22%20slang%3D%22en-US%22%3ERe%3A%20Best%20practice%20to%20add%20guest%20to%20AAD%3F%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-306919%22%20slang%3D%22en-US%22%3ENo%2C%20I%20think%20I'm%20good.%20Thanks%20for%20letting%20me%20test.%20Just%20one%20note%3A%20adding%20as%20a%20guest%20does%20not%20require%20tenant%20switching%20if%20the%20conversation%20is%20under%20the%20Chat%20tab%20instead%20of%20the%20Teams%20tab.%20Again%2C%20thanks%20for%20sticking%20with%20this%20thread.%3C%2FLINGO-BODY%3E%3CLINGO-SUB%20id%3D%22lingo-sub-306808%22%20slang%3D%22en-US%22%3ERe%3A%20Best%20practice%20to%20add%20guest%20to%20AAD%3F%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-306808%22%20slang%3D%22en-US%22%3E%3CP%3EI%20really%20wish%20out%20of%20the%20box%20it%20would%20disable%20the%20guest%20access%20for%20everyone.%20This%20was%20flagged%20by%20our%20security%20team%20because%20of%20the%20nature%20of%20business%20my%20company%20does.%20I%20think%20it%20should%20be%20turned%20off%2C%20but%20I%20am%20most%20likely%20in%20the%20minority%20in%20this%20one.%3C%2FP%3E%3C%2FLINGO-BODY%3E%3CLINGO-SUB%20id%3D%22lingo-sub-306739%22%20slang%3D%22en-US%22%3ERe%3A%20Best%20practice%20to%20add%20guest%20to%20AAD%3F%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-306739%22%20slang%3D%22en-US%22%3EYeah%2C%20working%20on%20Desktop%20now%2C%20you%20used%20to%20not%20be%20able%20to%20pick%2C%20not%20sure%20when%20it%20got%20added%2C%20but%20it's%20there%20now%20%3A).%3CBR%20%2F%3E%3CBR%20%2F%3EAnyway%2C%20so%20bottom%20line%20here%2C%20you%20should%20be%20able%20to%20chose%2C%20having%20a%20guest%20is%20not%20required.%20Test%20with%20my%20tenant%20if%20you%20wish%2C%20but%20if%20it%20works%2C%20and%20you%20can't%20do%20that%20with%20someone%20you're%20trying%20to%20reach%20and%20you%20don't%20get%20the%20%22search%20externally%20for%22%20and%20it%20doesn't%20connect%2C%20then%20they%20must%20not%20have%20their%20end%20configured%2C%20but%20inviting%20them%20or%20adding%20them%20as%20a%20guest%20to%20your%20tenant%20allows%20them%20to%20tenant%20switch%20to%20chat%2C%20which%20isn't%20the%20same%20as%20federation.%3CBR%20%2F%3E%3CBR%20%2F%3EAnyway%2C%20let%20us%20know%20if%20you%20have%20other%20questions%20or%20need%20help%20with%20more%20testing.%3C%2FLINGO-BODY%3E%3CLINGO-SUB%20id%3D%22lingo-sub-306709%22%20slang%3D%22en-US%22%3ERe%3A%20Best%20practice%20to%20add%20guest%20to%20AAD%3F%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-306709%22%20slang%3D%22en-US%22%3EI%E2%80%99ve%20been%20able%20to%20use%20federation%20from%20the%20desktop%20client%20when%20same%20mail%20is%20used%20as%20guest%20in%20my%20AAD!%20This%20was%20tested%20not%20long%20ago%20though%3CBR%20%2F%3E%3CBR%20%2F%3EAdam%3C%2FLINGO-BODY%3E%3CLINGO-SUB%20id%3D%22lingo-sub-306701%22%20slang%3D%22en-US%22%3ERe%3A%20Best%20practice%20to%20add%20guest%20to%20AAD%3F%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-306701%22%20slang%3D%22en-US%22%3EInteresting.%20Because%20in%20the%20mobile%20app%20I%20can%20chat%20with%20guest%20or%20use%20federation.%20I%20couldn%E2%80%99t%20do%20that%20on%20desktop%20client%20previously.%20They%20either%20added%20it%20or%20mobile%20can%20do%20it%20only%20will%20test%20when%20I%20get%20home.%3CBR%20%2F%3E%3CBR%20%2F%3EIf%20you%20chat%20with%20a%20guest%20user%20they%20are%20switching%20to%20your%20tenant%20to%20chat%20with%20you%20most%20likely.%3CBR%20%2F%3E%3CBR%20%2F%3EAnyway%20if%20you%20want%20to%20test%20federation%20use%20turismon%40webbtech.org%20it%20has%20open%20federation%20you%20could%20send%20a%20message%20to.%3C%2FLINGO-BODY%3E%3CLINGO-SUB%20id%3D%22lingo-sub-306699%22%20slang%3D%22en-US%22%3ERe%3A%20Best%20practice%20to%20add%20guest%20to%20AAD%3F%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-306699%22%20slang%3D%22en-US%22%3E%3CBLOCKQUOTE%3E%3CHR%20%2F%3E%3CA%20href%3D%22https%3A%2F%2Ftechcommunity.microsoft.com%2Ft5%2Fuser%2Fviewprofilepage%2Fuser-id%2F869%22%20target%3D%22_blank%22%3E%40Chris%20Webb%3C%2FA%3E%26nbsp%3Bwrote%3A%3CBR%20%2F%3EYou%20do%20not%20have%20to%20add%20people%20to%20use%20external%20federation%20%E2%80%9Cchat%E2%80%9D%20tab.%20If%20everything%20is%20setup%20properly.%20You%20click%20new%20chat%20and%20type%20in%20their%20email%20and%20you%20should%20get%20a%20%E2%80%9Csearch%20externally%20for%20x%E2%80%9D%20underneath.%20If%20you%20are%20not%20getting%20this%20then%20something%20going%20on%20with%20config%20somehow.%3CHR%20%2F%3E%3C%2FBLOCKQUOTE%3E%3CP%3EWhen%20everything%20is%20configured%20properly%20on%20my%20end%20to%20Teams%20with%20externals%2C%20and%20I%20click%20on%20the%20Chat%20tab%20to%20start%20a%20new%20chat%2C%20and%20enter%20the%20name%20of%20an%20external%20person%20who%20is%20not%20in%20my%20AAD%2C%20Teams%20responds%20with%2C%20%22We%20didn't%20find%20any%20matches.%22%20Note%20that%20I%20have%20no%20idea%20how%20the%20organizations%20for%20those%20externals%20have%20configured%20their%20own%20Teams.%3C%2FP%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3CP%3ESo%2C%20given%20that%20experience%20and%20the%20earlier%20replies%20here%2C%20would%20it%20be%20correct%20to%20state%20the%20following%3A%3C%2FP%3E%3CUL%3E%3CLI%3EI%20can%20chat%20(not%20in%20a%20team)%20with%20an%20external%20who%20is%20a%20guest%20in%20my%20AAD%20if%20their%20Teams%20is%20configured%20for%20external%20chat%20(I%20do%20this%20presently)%3B%3C%2FLI%3E%3CLI%3EI%20%3CEM%3Ecannot%3C%2FEM%3E%20chat%20with%20an%20external%20who%20is%20%3CEM%3Enot%3C%2FEM%3E%20in%20my%20AAD%20if%20their%20Teams%20is%20%3CEM%3Enot%3C%2FEM%3E%20configured%20for%20external%20chat%20(I%20receive%20the%20%22We%20didn't%20find%20any%20matches%22%20message)%3B%20and%3C%2FLI%3E%3CLI%3EMy%20experience%20is%20inconclusive%20on%20whether%20I%20can%20chat%20with%20an%20external%20who%20is%20%3CEM%3Enot%3C%2FEM%3E%20in%20my%20AAD%20if%20their%20Teams%20%3CEM%3Eis%3C%2FEM%3E%20configured%20for%20external%20chat%3F%3C%2FLI%3E%3C%2FUL%3E%3C%2FLINGO-BODY%3E%3CLINGO-SUB%20id%3D%22lingo-sub-306696%22%20slang%3D%22en-US%22%3ERe%3A%20Best%20practice%20to%20add%20guest%20to%20AAD%3F%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-306696%22%20slang%3D%22en-US%22%3EWell%20if%20they%20add%20people%20ahead%20of%20time%20and%20it%20has%20a%20match%20then%20they%20won%E2%80%99t%20get%20the%20option%20to%20chat%20externally.%20It%E2%80%99s%20one%20of%20the%20big%20disconnects%20between%20federation%20and%20having%20a%20local%20account%20that%20can%20get%20tricky%20to%20understand%3C%2FLINGO-BODY%3E%3CLINGO-SUB%20id%3D%22lingo-sub-306687%22%20slang%3D%22en-US%22%3ERe%3A%20Best%20practice%20to%20add%20guest%20to%20AAD%3F%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-306687%22%20slang%3D%22en-US%22%3EYes!%20What%20you%20are%20seeing%20is%20that%20teams%20found%20your%20guest%20account%20when%20searching%20for%20a%20person%20in%20chat!%20It%20can%20be%20confusing%20because%20this%20will%20start%20a%20chat%20within%20your%20tenant%20(%20the%20person%20will%20see%20this%20when%20it%E2%80%99s%20switched%20to%20your%20tenant!%20Keep%20typing%20and%20search%20externally%3C%2FLINGO-BODY%3E%3CLINGO-SUB%20id%3D%22lingo-sub-306206%22%20slang%3D%22en-US%22%3ERe%3A%20Best%20practice%20to%20add%20guest%20to%20AAD%3F%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-306206%22%20slang%3D%22en-US%22%3EYou%20do%20not%20have%20to%20add%20people%20to%20use%20external%20federation%20%E2%80%9Cchat%E2%80%9D%20tab.%20If%20everything%20is%20setup%20properly.%20You%20click%20new%20chat%20and%20type%20in%20their%20email%20and%20you%20should%20get%20a%20%E2%80%9Csearch%20externally%20for%20x%E2%80%9D%20underneath.%20If%20you%20are%20not%20getting%20this%20then%20something%20going%20on%20with%20config%20somehow.%3C%2FLINGO-BODY%3E%3CLINGO-SUB%20id%3D%22lingo-sub-306205%22%20slang%3D%22en-US%22%3ERe%3A%20Best%20practice%20to%20add%20guest%20to%20AAD%3F%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-306205%22%20slang%3D%22en-US%22%3E%3CP%3EAccording%20to%20my%20testing%2C%20adding%20an%20external%20to%20the%20Chat%20blade%20in%20Teams%2C%20i.e.%2C%20not%20adding%20them%20to%20a%20team%20in%20the%20Teams%20blade%2C%20only%20works%20if%20they%20have%20been%20pre-added%20as%20a%20guest%20in%20AAD%20(assuming%20all%20other%20settings%20are%20correct).%3C%2FP%3E%3C%2FLINGO-BODY%3E%3CLINGO-SUB%20id%3D%22lingo-sub-301699%22%20slang%3D%22en-US%22%3ERe%3A%20Best%20practice%20to%20add%20guest%20to%20AAD%3F%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-301699%22%20slang%3D%22en-US%22%3E%3CBLOCKQUOTE%3E%3CHR%20%2F%3E%3CA%20href%3D%22https%3A%2F%2Ftechcommunity.microsoft.com%2Ft5%2Fuser%2Fviewprofilepage%2Fuser-id%2F869%22%20target%3D%22_blank%22%3E%40Chris%20Webb%3C%2FA%3E%26nbsp%3Bwrote%3A%3CBR%20%2F%3Efederation(external%20access%20needs%20enabled%20in%20admin%20center%20on%20both%20sides)%3CBR%20%2F%3E%3CBR%20%2F%3Ethey%20will%20have%20to%20tenant%20switch%20in%20the%20client%20to%20your%20tenant%20to%20participate%20in%20that%20chat.%20The%20only%20way%20to%20prevent%20this%20is%20to%20not%20have%20them%20as%20a%20guest%20and%20use%20the%20chat%20federation%2C%20but%20then%20they%20can't%20be%20in%20a%20Team.%20It's%20a%20mess%3CHR%20%2F%3E%3C%2FBLOCKQUOTE%3E%3CP%3EYour%20first%20point%20on%20having%20to%20enable%20external%20access%20on%20both%20ends%20might%20well%20be%20why%20the%20%22just%20add%20them%20to%20chat%22%20didn't%20work.%20I'll%20test%20this%20weekend.%3C%2FP%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3CP%3EYour%20second%20point%20couldn't%20be%20truer.%20The%20idea%20of%20switching%20tenants%20makes%20fine%20sense%20in%20theory%2C%20and%20without%20pondering%20too%20much%20it%20probably%20makes%20good%20if%20not%20essential%20sense%20from%20a%20security%2Faccess%20management%20perspective%2C%20but%20it's%20extremely%20cumbersome.%3C%2FP%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3CP%3EI%20think%20the%20answer%20to%20all%20this%20is%20to%20enter%20the%20people%20in%20AAD%20when%20possible%3B%20develop%20some%20written%20or%20video%20guide%20to%20administratively%20enabling%20federated%20chat%20and%20send%20a%20link%20to%20collaborating%20entities%3B%20and%20hope%20for%20the%20best.%3C%2FP%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3CP%3EIn%20this%20context%2C%20is%20there%20any%20point--at%20all--in%20entering%20an%20external%20as%20a%20mail%20user%3F%20We%20had%20to%20do%20that%20for%20a%20few%20guests%20in%20order%20to%20get%20them%20into%20mail-enabled%20security%20groups%2C%20but%20with%20the%20ability%20to%20add%20them%20into%20AAD%20as%20guests%20it%20seems%20that%20a%20'mail%20user'%20is%20no%20longer%20necessary%20or%20appropriate%20for%20externals.%20Thoughts%3F%3C%2FP%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3C%2FLINGO-BODY%3E%3CLINGO-SUB%20id%3D%22lingo-sub-301387%22%20slang%3D%22en-US%22%3ERe%3A%20Best%20practice%20to%20add%20guest%20to%20AAD%3F%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-301387%22%20slang%3D%22en-US%22%3E%3CP%3ESome%20other%20benefits%20of%20pre-adding%20them%20is%20that%20you%20can%20add%20additional%20attributes%2C%20control%20the%20groups%20they%20go%20into%20and%20use%20the%20Access%20Review%20process%20to%20help%20confirm%20that%20they%20still%20belong%20on%20a%20routine%20schedule%3C%2FP%3E%3C%2FLINGO-BODY%3E%3CLINGO-SUB%20id%3D%22lingo-sub-301381%22%20slang%3D%22en-US%22%3ERe%3A%20Best%20practice%20to%20add%20guest%20to%20AAD%3F%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-301381%22%20slang%3D%22en-US%22%3ETo%20answer%20you%20question%20regarding%20Teams.%20If%20you%20just%20need%20to%20chat%20with%20them%20you%20can%20use%20federation(external%20access%20needs%20enabled%20in%20admin%20center%20on%20both%20sides)%20and%20just%20click%20new%20chat%20and%20type%20in%20their%20address%20and%20do%20so.%3CBR%20%2F%3E%3CBR%20%2F%3EHowever%20if%20you%20have%20added%20them%20to%20a%20Team%20and%20you%20want%20to%20have%20private%20chat%2C%20you%20can%20still%20do%20so%20just%20by%20clicking%20new%20chat%20and%20typing%20their%20name%2C%20Once%20a%20guest%20is%20invited%20to%20a%20Team%20you%20have%20the%20ability%20to%20then%20Chat%20with%20them.%3CBR%20%2F%3E%3CBR%20%2F%3EKeep%20in%20mind%20this%20will%20house%20the%20chat%20in%20your%20tenant%2C%20and%20they%20will%20have%20to%20tenant%20switch%20in%20the%20client%20to%20your%20tenant%20to%20participate%20in%20that%20chat.%20The%20only%20way%20to%20prevent%20this%20is%20to%20not%20have%20them%20as%20a%20guest%20and%20use%20the%20chat%20federation%2C%20but%20then%20they%20can't%20be%20in%20a%20Team.%20It's%20a%20mess%2C%20but%20Microsoft%20says%20they%20are%20working%20on%20updating%20this%2C%20it'll%20just%20be%20awhile%2C%20but%20those%20are%20the%202%20situations%20and%20how%20the%20chat%20works%20when%20dealing%20with%20guests.%3C%2FLINGO-BODY%3E%3CLINGO-SUB%20id%3D%22lingo-sub-300810%22%20slang%3D%22en-US%22%3ERe%3A%20Best%20practice%20to%20add%20guest%20to%20AAD%3F%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-300810%22%20slang%3D%22en-US%22%3E%3CP%3EApologises%2C%20didn't%20see%20the%20other%20replies%20%3A)%3C%2Fimg%3E%3C%2FP%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3CP%3EIf%20you'd%20like%20to%20move%20B2B%26nbsp%3Binvitations%20away%20from%20SPO%2FTeams%2C%20try%20the%20B2B%20portal%20or%20delegate%20one%20of%20the%203rd%20parties%26nbsp%3BB2B%20accounts%2C%20the%20Guest%26nbsp%3BInviter%20role.%3C%2FP%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3CP%3E%3CFONT%3E%3CA%20href%3D%22https%3A%2F%2Fdocs.microsoft.com%2Fen-us%2Fazure%2Factive-directory%2Fb2b%2Fdelegate-invitations%22%20target%3D%22_blank%22%20rel%3D%22noopener%20noreferrer%20noopener%20noreferrer%22%3Ehttps%3A%2F%2Fdocs.microsoft.com%2Fen-us%2Fazure%2Factive-directory%2Fb2b%2Fdelegate-invitations%3C%2FA%3E%3C%2FFONT%3E%3C%2FP%3E%3CP%3E%3CFONT%3E%3CA%20href%3D%22https%3A%2F%2Fdocs.microsoft.com%2Fen-us%2Fazure%2Factive-directory%2Fb2b%2Fself-service-portal%22%20target%3D%22_blank%22%20rel%3D%22noopener%20noreferrer%20noopener%20noreferrer%22%3Ehttps%3A%2F%2Fdocs.microsoft.com%2Fen-us%2Fazure%2Factive-directory%2Fb2b%2Fself-service-portal%3C%2FA%3E%3C%2FFONT%3E%3C%2FP%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3C%2FLINGO-BODY%3E%3CLINGO-SUB%20id%3D%22lingo-sub-300790%22%20slang%3D%22en-US%22%3ERe%3A%20Best%20practice%20to%20add%20guest%20to%20AAD%3F%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-300790%22%20slang%3D%22en-US%22%3EHi!%3CBR%20%2F%3EThey%20will%20already%20be%20guests%20in%20AAD%2C%20created%20during%20the%20invitation%20process%20to%20teams%3C%2FLINGO-BODY%3E%3CLINGO-SUB%20id%3D%22lingo-sub-300779%22%20slang%3D%22en-US%22%3ERe%3A%20Best%20practice%20to%20add%20guest%20to%20AAD%3F%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-300779%22%20slang%3D%22en-US%22%3E%3CP%3EHi%20Joseph%2C%3C%2FP%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3CP%3EThe%20short%20answer%20is%20no%20%E2%80%93%20both%20ways%20create%20%E2%80%9Cshadow%E2%80%9D%20accounts%20in%20your%20tenant%2C%20which%20the%20B2B%20user%20then%20needs%20to%20redeem%20before%20use.%3C%2FP%3E%3CP%3E%3CA%20href%3D%22https%3A%2F%2Fdocs.microsoft.com%2Fen-us%2Fazure%2Factive-directory%2Fb2b%2Fredemption-experience%22%20target%3D%22_blank%22%20rel%3D%22noopener%20noreferrer%20noopener%20noreferrer%22%3Ehttps%3A%2F%2Fdocs.microsoft.com%2Fen-us%2Fazure%2Factive-directory%2Fb2b%2Fredemption-experience%3C%2FA%3E%3C%2FP%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3CP%3ESome%20customers%20manage%20and%20restrict%20account%20creation%20using%20the%20B2B%20portal%2C%20or%20create%20B2B%20accounts%20for%20their%20users%20to%20then%20assign%20to%20resources.%3C%2FP%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3CP%3EIf%20you%E2%80%99d%20like%20to%20restrict%20B2B%20account%20creation%2C%20please%20refer%20to%20the%20%E2%80%98External%20collaboration%20settings%E2%80%99%20blade.%3CSPAN%20class%3D%22lia-inline-image-display-wrapper%20lia-image-align-inline%22%20style%3D%22width%3A%20497px%3B%22%3E%3CIMG%20src%3D%22https%3A%2F%2Fgxcuf89792.i.lithium.com%2Ft5%2Fimage%2Fserverpage%2Fimage-id%2F62621i864B466D1FE77FC1%2Fimage-size%2Flarge%3Fv%3D1.0%26amp%3Bpx%3D999%22%20alt%3D%22External%20Collaboration%20Settings.PNG%22%20title%3D%22External%20Collaboration%20Settings.PNG%22%20%2F%3E%3C%2FSPAN%3E%3C%2FP%3E%3CP%3EHope%20this%20helps.%3C%2FP%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3C%2FLINGO-BODY%3E%3CLINGO-SUB%20id%3D%22lingo-sub-300754%22%20slang%3D%22en-US%22%3ERe%3A%20Best%20practice%20to%20add%20guest%20to%20AAD%3F%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-300754%22%20slang%3D%22en-US%22%3E%3CP%3EHi.%20thanks.%20Yes%2C%20I%20should%20have%20added%20that%20I'm%20aware%20of%20the%20differing%20abilities%20of%20users%20and%20admins%20to%20add%20guests%20in%20AAD.%20i%20think%20your%20reply%20implicitly%20answers%20the%20question%2C%20though%2C%20that%20there%20is%20no%20downside%2C%20and%20potentially%20some%20upsides%2C%20to%20pre-adding%20a%20guest%20in%20AAD.%20My%20actual%20situation%20is%20that%20there%20are%20two%20externals%20with%20whom%20I%20need%20regularly%20to%20chat%20across%20a%20number%20of%20different%20projects.%20I%20could%20add%20them%20into%20a%20Teams%20channel%20without%20pre-registering%20them%20in%20AAD%2C%20but%20sometimes%20the%20chats%20need%20to%20be%20outside%20the%20project-oriented%20Teams%20channels.%20To%20add%20them%20as%20a%20contact%20in%20Teams%20chat%2C%20I%20think%20I'll%20need%20to%20pre-register%20them%20as%20guest%20users%20in%20AAD.%20Sounds%20like%20there's%20no%20reason%20not%20to%20do%20that--right%3F%3C%2FP%3E%3C%2FLINGO-BODY%3E%3CLINGO-SUB%20id%3D%22lingo-sub-300738%22%20slang%3D%22en-US%22%3ERe%3A%20Best%20practice%20to%20add%20guest%20to%20AAD%3F%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-300738%22%20slang%3D%22en-US%22%3EJust%20to%20make%20clear%20of%20my%20previous%20post!%20Users%20can%20add%20guests%20if%20it%E2%80%99s%20setup%20this%20way%20via%20teams%2C%20sharepoint!%20This%20happens%20automatically!%20However%20they%20cannot%20pre%20add%20into%20AAd%3C%2FLINGO-BODY%3E%3CLINGO-SUB%20id%3D%22lingo-sub-300733%22%20slang%3D%22en-US%22%3ERe%3A%20Best%20practice%20to%20add%20guest%20to%20AAD%3F%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-300733%22%20slang%3D%22en-US%22%3EIt%20all%20depends%20on%20how%20your%20org%20works..users%20can%E2%80%99t%20add%20users%20in%20AAD!%20If%20you%20want%20to%20control%20what%20guests%20are%20invited%20in%20the%20organization-%20pre%20add%20them%20is%20a%20good%20way%20to%20have%20control!%20Then%20you%20can%20set%20permissions%20for%20users%20to%20add%20the%20guests%20that%E2%80%99s%20already%20in%20the%20tenant!%3CBR%20%2F%3EMost%20orgs%20wants%20users%20to%20be%20able%20to%20add%20guests%20themselves%20via%20sharing%2C%20teams%20etc..%3CBR%20%2F%3E%3CBR%20%2F%3EAlso%20a%20scenario%20to%20pre%20add%20in%20AAD%20is%20if%20you%20collaborate%20with%20another%20company%20and%20want%20all%20those%20users%20as%20guests%2C%20it%E2%80%99s%20a%20good%20idea%20to%20mass%20import%20them%20into%20AAD%3C%2FLINGO-BODY%3E
Highlighted
Contributor

I could give a guest access to SPO directly from the site's permissions settings, and I could give a guest access to Teams directly from the Teams interface (at least in a channel, if not in chat). Is there any reason not to first register the guest(s) in AAD?

21 Replies
Highlighted

That's not true, if you chat with your "Guest" account, then they have to tenant switch. If you use federation, it goes straight to their tenant chat tab. it's a split that would be nice if they can consolidate it someday.

 

But again, it depends on how the account is setup, if they are actually invited to Teams, and a guest account is tied to that, then they have to switch, otherwise it's using federation. 

 

But as you can see, it's all confusing :)

Highlighted
Thanks for the tip. Very helpful!