May 25 2017 03:34 AM - edited May 25 2017 04:12 AM
May 25 2017 03:34 AM - edited May 25 2017 04:12 AM
I am still confused about the ability to share with external users. I have been able to successfully share with a gmail, hotmail, and other "consumer" providers.
I am not successful with other Office 365 external users.
Is this a supported scenario? I have my tenant and I want to add firstname.lastname@example.org and can't but i can add the same "joe"@hispersonalemail.com?
The error messaging compounds my confusion.
As I add the person I see this:
So I go to my admin center as told and....
And for the finalle the SharePoint additonal settings:
I am obviously missing something...
Any suggestions are much appreciated!
May 25 2017 03:54 AMSolution
Have you manually enabled (by PowerShell) the external sharing for that Group?
May 25 2017 04:29 AM
May 25 2017 04:41 AM
No. The tenant setting is necessary, but not sufficient.
You have also to enable sharing individually for each Group.
"By default, all SharePoint site collections that are part of an Office 365 Group have the sharing setting set to Allow sharing only with the external users that already exist in your organization's directory. To change this setting, you can use the Set-SPOSite Windows PowerShell cmdlet." (from the article cited above)
May 30 2017 04:49 PM
May 31 2017 02:17 AM
To be fair, MS has promised some time ago in a thread here that the default for Groups will be changed to allow anonymous sharing. But then I guess that someone will complain about this choice... ;)
So, the best thing would be to have all defaults configurable in the Admin Center UI. But then I guess that someone will complain that he/she has shot himself in the foot... ;)
Jun 01 2017 08:52 PM
Jun 02 2017 04:21 PM
Jun 06 2017 03:21 PM
Jun 07 2017 01:45 AM
Yes, it will allow sharing with every MSA or Work and School Account.
If you don't run the PowerShell command, you will be able to share only with external users already existing in your directory, if any.
Sep 21 2017 01:51 AM
Is it just me or does this all sound completely bonkers? As a small business, we don't have an IT department and I'm responsible for keeping things running. I can generally find my way around the Admin Centre, but have never used PowerShell and don't see why I should need to. All the Admin Centre settings are set so that external sharing should work ... but it doesn't ... and the answer is to use PowerShell!?!? If the Admin settings only do half the job, why bother having them at all, why not just tell customers that they can only do external sharing if they get a highly paid SharePoint administrator who knows how to use PowerShell ... or have I missed something?
Sep 22 2017 02:47 AM
The actual trend is to require PowerShell for all "advanced" settings. Only "basic" settings are configurable in the Admin UI. (Of course it is arguable what is "basic" and what is "advanced"...)
Also, it is quite common to require PowerShell in order to tweak settings for new features: the corresponding Admin UI is often introduced later.
Hence, IMHO, you should start to learn the basics of PowerShell: it should not be so difficult...
Sep 22 2017 06:00 AM
Well, I've just spent 45 minutes on the phone to a very helpful Microsoft Tech. For the benefit of others, I'd summarise as follows:
Now, this didn't work for me first time as it said I was restricting settings to lower options than in the SharePoint Admin Centers. I therefore changed access in there to allow anonymous access, ran the code again and then changed the Admin Center setting back.
All now works perfectly! Hurrah.
Thanks for the input from people on here.
Nov 15 2017 01:37 PM
Just ran the same script and it worked like a charm. Only my second time using PowerShell so I'm pretty excited. Seems like when dealing with Groups, PowerShell is the best option. I just recovered a deleted Group using PowerShell (my first PowerShell adventure).
Apr 16 2018 08:39 PM
Why Microsoft, why?! This is so stupid. Seriously, every time a new team is created I have to run a powershell script to enable external sharing with new external users?! What a waste of time.
May 07 2018 11:40 AM
@Oz Oscroft and others - I was having similar frustrations but found from the Microsoft documentation (scroll down to the -SharingCapability switch section) we have another option so you don't have to enable anonymous sharing. I got an error with the ExternalUserAndGuestSharing switch since my tenant is set to only allow authenticated external users. Using the switch ExternalUserSharingOnly did the job for the site collection I needed.
That said, oddly it seems to have pushed the change for the tenant and all site collections, as now checking on sites that I know didn't allow new external users do now. They are also site collections that came back showing ExistingExternalUserSharingOnly using PS previously to check the setting. Now they show ExternalUserSharingOnly as a result using the same command:
Get-SPOSite -Identity https://<tenantname>.sharepoint.com/sites/<sitename>| fl
I was also troubleshooting where certain site collections would allow for new external users while others didn't. The commonality seemed to be that sites created from the SharePoint home allowed for it as all settings would indicate in the Admin center GUI. Sites created via MS Teams did not. I even created a new Team to test and sure enough it was set to ExistingExternalUserSharingOnly after being created and I couldn't add new external users. Three hours later I check the same site and now it's set to ExternalUserSharingOnly - it changed!
I know for a fact none of these sites were updated in between the time of running the set PS command on the single site collection and a few hours later. We're okay with this being pushed across all collections but still extremely odd.