Adding guest from concrete domains

Iron Contributor

Hi,

 

we would like to allow to our end users to add new guest to Teams. We found a solution (https://docs.microsoft.com/en-us/azure/active-directory/b2b/allow-deny-list) that we can allow specific domains and users can not add anyone else, only people from these specific domains but we met with an issue that even global administrator is not able to add guests from different domains. Do you have an workaround for this? Time to time we need to add concrete guest e.g. with Live ID to our tenant but in this case it is not possible?

 

Thank you,

 

Mirek

2 Replies

That's how it works, not even admins can bypass the policy. You can of course temporary suspend/edit it, then switch it back on.

Hi @Vasil Michev , thank you for your answer. I was afraid of it... So this is really best practice to do it this way? You have to turn off the policy and then turn it on again. That's not user friendly but ok. I will try to explain it to our IT and Security departments.