Access rights

[Ashwin2075]

We are looking to have a specific group of users on MS Teams that need to be isolated from the rest of the organisation.  I think the best way to do this is via a private team site.

But the question I have is will this limit us in the future if we want to create Org wide public teams as this isolated group must not be able to access Org wide public teams.

If AD is setup correctly I think we could create members of team sites based on groups or distribution lists. Limitation of this are that it will only add all the users within that group/dL in a one-time action? So future changes of membership in that group won’t affect the members of the team and they will need to be added/removed manually.

I don’t think org is ready for the dynamic groups in Azure AD as this will also require P1 licensing.

With the approach above I am thinking that we will never be able to use Public groups.

Is another option to create a 2nd tenancy specific to the team?

[#2 · Accepted solution]

Hi!

Yeah are they member of the org they can access other public groups.

Other I can think of is information barriers but that isolates in more ways you may really want!

https://docs.microsoft.com/en-us/microsoftteams/information-barriers-in-teams

Adam

[#3]

Thanks Adam.

We are looking for a solution to make some users restrict to have public groups access like All staff channel.

Not sure if this would work there.

[#4]

@Ashwin2075 

Yeah, it doesn't do what you want