SOLVED

adding guests to a Team

%3CLINGO-SUB%20id%3D%22lingo-sub-1962099%22%20slang%3D%22en-US%22%3Eadding%20guests%20to%20a%20Team%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-1962099%22%20slang%3D%22en-US%22%3E%3CP%3EThe%20following%20happens%20and%20i%20cannot%20explain%20why%3A%3C%2FP%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3CP%3Esetup%20a%20Team%2C%20prive%20Team%2C%20add%202%20owners%2C%20myself%20and%20another%20Active%20Directory%20owner.%20Sharing%20at%20org%20level%20is%20on.%20At%20Azure%20level%20several%20domains%20are%20trusted.%3C%2FP%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3CP%3EAfter%20adding%20the%20private%20Team%2C%20i%20can%20add%20members%20out%20of%20the%20trusted%20domain%20by%20entering%20the%20complete%20emailadress%20and%20then%20the%20option%20appears%20in%20Teams%20to%20add%20that%20user%20**bleep**%20guest.%26nbsp%3B%3C%2FP%3E%3CP%3EThe%20problem%20is%3A%20the%20other%20owner%20cannot%20add%20the%20same%20user%20as%20guest%20to%20that%20Team%2C%20he%20cannot%20add%20any%20user%20from%20outside%20our%20AD%2C%20He%20is%20owner%20however%20just%20like%20me.%3C%2FP%3E%3CP%3EWhat%20can%20be%20the%20difference%3F%3C%2FP%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3CP%3EIk%20have%20added%20other%20owners%20and%20they%20also%20cannot%20add%20those%20external%20users%20by%20entering%20the%20full%20emailadress.%20They%20only%20can%20add%20those%20users%20when%20they%20are%20already%20invited%20as%20guest%20thru%20Azure%20but%20not%20when%20the%20are%20only%20in%20the%20trusted%20domains%20and%20not%20already%20a%20guest%20in%20Azure....%3C%2FP%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3CP%3EI%20have%20made%20another%20Team%20as%20test%20and%20added%20again%20several%20owners.%20Nothing%20changes...they%20cannot%20add%20and%20i%20can%20emailadresses%20as%20guest%20outside%20of%20the%20organisation.%3C%2FP%3E%3C%2FLINGO-BODY%3E%3CLINGO-LABS%20id%3D%22lingo-labs-1962099%22%20slang%3D%22en-US%22%3E%3CLINGO-LABEL%3Eadding%20guests%20owner%3C%2FLINGO-LABEL%3E%3C%2FLINGO-LABS%3E%3CLINGO-SUB%20id%3D%22lingo-sub-1965309%22%20slang%3D%22en-US%22%3ERe%3A%20adding%20guests%20to%20a%20Team%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-1965309%22%20slang%3D%22en-US%22%3E%3CP%3EHello%26nbsp%3B%3CA%20href%3D%22https%3A%2F%2Ftechcommunity.microsoft.com%2Ft5%2Fuser%2Fviewprofilepage%2Fuser-id%2F390690%22%20target%3D%22_blank%22%3E%40Corne1205%3C%2FA%3E%26nbsp%3B%20I'm%20going%20to%20ask%20one%20of%20our%20MVPs%20-%26nbsp%3B%3CA%20href%3D%22https%3A%2F%2Ftechcommunity.microsoft.com%2Ft5%2Fuser%2Fviewprofilepage%2Fuser-id%2F616707%22%20target%3D%22_blank%22%3E%40PeterRising%3C%2FA%3E%26nbsp%3B-%20to%20take%20a%20look%20at%20your%20question.%3C%2FP%3E%3C%2FLINGO-BODY%3E%3CLINGO-SUB%20id%3D%22lingo-sub-1965849%22%20slang%3D%22en-US%22%3ERe%3A%20adding%20guests%20to%20a%20Team%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-1965849%22%20slang%3D%22en-US%22%3ECan%20it%20be%20that%20you%20are%20an%20org%20admin%3F%20(global%20admin%20etc)%20and%20the%20setting%20in%20Azure%20is%20that%20members%20cannot%20invite%20under%20external%20collaboration%20settings.%20If%20so%2C%20this%20makes%20perfect%20sense%3C%2FLINGO-BODY%3E%3CLINGO-SUB%20id%3D%22lingo-sub-1966774%22%20slang%3D%22en-US%22%3ERe%3A%20adding%20guests%20to%20a%20Team%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-1966774%22%20slang%3D%22en-US%22%3E%3CP%3E%3CA%20href%3D%22https%3A%2F%2Ftechcommunity.microsoft.com%2Ft5%2Fuser%2Fviewprofilepage%2Fuser-id%2F72542%22%20target%3D%22_blank%22%3E%40adam%20deltinger%3C%2FA%3E%26nbsp%3Bno%20i%20am%20not%20an%20admin%2C%20just%20a%20member%20of%20Azure%20and%20Office%20365.%20When%20i%20do%20admin%20activities%20i%20am%20logging%20in%20as%20another%20user%2C%20an%20admin%20user.%3C%2FP%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3CP%3EI%20do%20not%20have%20more%20rights%20then%20the%20other%20owners.%20I%20have%20never%20had%20this%20before.%20Other%20departments%20making%20there%20own%20Teams%20and%20there%20are%20no%20problems.%3C%2FP%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3CP%3EBUT%20the%20difference%20can%20be%20that%20i%20have%20made%20a%20Ooffice%20365%20group%20creators%20group%20with%20severl%20heads%20in%20it.%20In%20Azure%20i%20configured%20a%20policy%20that%20only%20members%20of%20that%20group%20can%20make%20Office%20365%20groups.%20How%20ever%20when%20the%20Team%20is%20made%20by%20me%20and%20not%20by%20the%20other%20owners%20this%20has%20nothing%20to%20do%20with%20adding%20member%20to%20a%20Team%20or%20maybe%20there%20is%20a%20link%3F%3C%2FP%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3C%2FLINGO-BODY%3E%3CLINGO-SUB%20id%3D%22lingo-sub-1967303%22%20slang%3D%22en-US%22%3ERe%3A%20adding%20guests%20to%20a%20Team%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-1967303%22%20slang%3D%22en-US%22%3EHmm%20sounds%20strange%20indeed.%20Can%20you%20upload%20a%20screenshot%20of%20the%20azure%20settings%20for%20external%20collaboration%3F%20group%20creation%20ability%20and%20inviting%20guests%20are%20not%20connected%20as%20far%20as%20I%20know.%3CBR%20%2F%3E%3CBR%20%2F%3EAre%20you%20also%20saying%20that%20other%20in%20the%20org%20can%20invite%20guests%20except%20from%20the%20ones%20you%20created%3F%20How%20did%20you%20create%20the%20teams%3F%3CBR%20%2F%3E%3CBR%20%2F%3EAdam%3C%2FLINGO-BODY%3E
Occasional Contributor

The following happens and i cannot explain why:

 

setup a Team, prive Team, add 2 owners, myself and another Active Directory owner. Sharing at org level is on. At Azure level several domains are trusted.

 

After adding the private Team, i can add members out of the trusted domain by entering the complete emailadress and then the option appears in Teams to add that user **bleep** guest. 

The problem is: the other owner cannot add the same user as guest to that Team, he cannot add any user from outside our AD, He is owner however just like me.

What can be the difference?

 

Ik have added other owners and they also cannot add those external users by entering the full emailadress. They only can add those users when they are already invited as guest thru Azure but not when the are only in the trusted domains and not already a guest in Azure....

 

I have made another Team as test and added again several owners. Nothing changes...they cannot add and i can emailadresses as guest outside of the organisation.

8 Replies
Can it be that you are an org admin? (global admin etc) and the setting in Azure is that members cannot invite under external collaboration settings. If so, this makes perfect sense

@adam deltinger no i am not an admin, just a member of Azure and Office 365. When i do admin activities i am logging in as another user, an admin user.

 

I do not have more rights then the other owners. I have never had this before. Other departments making there own Teams and there are no problems.

 

BUT the difference can be that i have made a Ooffice 365 group creators group with severl heads in it. In Azure i configured a policy that only members of that group can make Office 365 groups. How ever when the Team is made by me and not by the other owners this has nothing to do with adding member to a Team or maybe there is a link?

 

Hmm sounds strange indeed. Can you upload a screenshot of the azure settings for external collaboration? group creation ability and inviting guests are not connected as far as I know.

Are you also saying that other in the org can invite guests except from the ones you created? How did you create the teams?

Adam

@adam deltinger I make te Team on the admin centre, add a Team and there i also add the owners..

 

 

 

Best Response confirmed by ThereseSolimeno (Microsoft)
Solution
Change "members can invite" to yes.

Without this set to yes, no other than admins can invite. And neither should you if you are not. Members here include owners of teams as well

@Adam deltinge Hi Adam, we do not want to let members adding members but only the owners, therefor i have made a security group 036 which can make  Teams and invite.

Without this setting only owners van invite and not members? , bytheway, why can i add members, i am just an owner like the other?

 

 

@Corne1205 

 

If it's a private Team only owners can add members, members can request other people to be added, but that needs to be approved by an owner.

 

As to why it works I'll guess that either you must have a suitable admin team, or maybe these guests already exist in your tenant?