Forum Discussion
Groups Guest access and SharePoint access
Looking to confirm my understanding. If you add a guest to an O365 from OWA, they will only have access to the associated SharePoint site if external sharing for that site has been turned on (or if ...
Thanks. We have external sharing disabled at the tenant level, are only enabling for specific sites. I added my personal external email to a Group I created, was able to conversate okay but got an access denied when trying to access the site. Sounds like then that would be expected? Until I turned on external sharing at the site collection level?
AFAIK if you have external sharing disabled at the tenant level, guests will be unable to access Groups sites, whatever the Group site collection setting is.
It seems settings are contained in quite a few places related to external sharing! This is what we currently have:
- In the Global Admin, Settings->Security & Privacy->Sharing, 'let users add new guests to the org' is turned ON.
- In the Global Admin, Settings->Service & add-ins->Sites, let users share content with external users who sign in' is turned ON
- In the Global Admin, Settings->Service & add-ins->Office 365 Groups, both 'Let group members outside the organization access group content' and 'Let group owners add people outside the organization to groups' are turned ON.
In the SharePoint Admin Center, under Sharing we have 'allow users to invite and share with authenticated external users' turned ON.
I tried to access again, and my phone redirected to a different account then what I had shared with. I tried again and could access the site no problem
Glad it worked!
Currently we don't have self-service site creation, it goes through a request process (that's why I was mentioning we don't enabled external sharing by default). If we move to self-service, but don't want external sharing of sites enabled by default (only allowed by a Global Admin), would we turn off external sharing at the SharePoint Admin center or the Global Amdin Center? Assuming that setting would flow through like I was originally descirbing with Groups Site access, external users could only have access to conversations, not access site unless we specifcially enabled on that site collection?
- This flu is burning my brain :-)...Salvatore is right, you need to have enabled external sharing at the tenant level so then you can choose what configuration apply per site collection basis....so if external sharing is enabled at the tenant level and guests users are configured in Office 365, your guest users should be able to access the Group site
Yes, the flu this year is really terrible...
Best wishes!
