Forum Discussion

Romain_Lasmi's avatar
Romain_Lasmi
Copper Contributor
Apr 13, 2020

Custom policy for guest account

Hi
I would like to configure a custom expérience for guest user in my tenant.
The principal reason : on many application, guests can list/read my Azure AD and eventually, browse all existing clients.

Have you a suggestion ?
I know an existing parameter who can blocked this experience in the tenant (but his affect all users...)

Thank you for your help !
Azure AD B2B

5 Replies

  • Moe_Kinani's avatar
    Moe_Kinani
    Bronze Contributor
    Apr 14, 2020
    Hi Romain,

    What kind of policies you like to force on the guest users?

    You can apply some policies to Guest users using Conditional Access like MFA, device platform etc, check url below:

    https://docs.microsoft.com/en-us/azure/active-directory/b2b/b2b-tutorial-require-mfa

    Moe
    • Romain_Lasmi's avatar
      Romain_Lasmi
      Copper Contributor
      Apr 14, 2020
      Hi Moe

      I would like to restrict guests right on the session and in the top idea, blocked list/read user in my Directory
      • Moe_Kinani's avatar
        Moe_Kinani
        Bronze Contributor
        Apr 14, 2020
        Guest will be able to access and read what invited for.
        In your case, Conditional Access should do the trick by blocking the guest from accessing other apps. I would also recommend using Access reviews to review the Guest Permissions, so you have an idea of permissions have given to guests in your directory.

        https://docs.microsoft.com/en-us/azure/active-directory/governance/entitlement-management-external-users

Resources