SOLVED

Control Guest's permissions in Files tab in Teams

%3CLINGO-SUB%20id%3D%22lingo-sub-1646158%22%20slang%3D%22en-US%22%3EControl%20Guest's%20permissions%20in%20Files%20tab%20in%20Teams%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-1646158%22%20slang%3D%22en-US%22%3E%3CP%3EHi%20All%3C%2FP%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3CP%3EI%20created%20Azure%20guest%20accounts%20and%20consultants%20reported%20permission%20denied%20when%20accessing%20the%20Files%20tab%20in%20the%20Teams%20channel.%20I%20followed%20the%20instructions%20in%20this%20link%26nbsp%3B%3CA%20href%3D%22https%3A%2F%2Fdocs.microsoft.com%2Fen-US%2Fsharepoint%2Fchange-external-sharing-site%22%20target%3D%22_blank%22%20rel%3D%22noopener%20noreferrer%22%3Ehttps%3A%2F%2Fdocs.microsoft.com%2Fen-US%2Fsharepoint%2Fchange-external-sharing-site%3C%2FA%3E%26nbsp%3Band%20changed%20from%20%3CU%3Eonly%20people%20in%20your%20organization%3C%2FU%3E%26nbsp%3Bto%20existing%20guest%20users%20only.%20Problem%20solved.%20The%20files%20are%20accessible%20in%20the%20Files%20tab.%26nbsp%3B%3C%2FP%3E%3CP%3EIs%20there%20a%20way%20to%20set%20the%20permission%20to%20view%20only%3F%20if%20so%20how%3F%3C%2FP%3E%3CP%3E%3CSPAN%20class%3D%22lia-inline-image-display-wrapper%20lia-image-align-inline%22%20image-alt%3D%22sharepoint.JPG%22%20style%3D%22width%3A%20662px%3B%22%3E%3CIMG%20src%3D%22https%3A%2F%2Ftechcommunity.microsoft.com%2Ft5%2Fimage%2Fserverpage%2Fimage-id%2F217099i32F6C14656889BA5%2Fimage-size%2Flarge%3Fv%3D1.0%26amp%3Bpx%3D999%22%20title%3D%22sharepoint.JPG%22%20alt%3D%22sharepoint.JPG%22%20%2F%3E%3C%2FSPAN%3E%3C%2FP%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3C%2FLINGO-BODY%3E%3CLINGO-LABS%20id%3D%22lingo-labs-1646158%22%20slang%3D%22en-US%22%3E%3CLINGO-LABEL%3EMicrosoft%20Teams%3C%2FLINGO-LABEL%3E%3C%2FLINGO-LABS%3E%3CLINGO-SUB%20id%3D%22lingo-sub-1646262%22%20slang%3D%22en-US%22%3ERe%3A%20Control%20Guest's%20permissions%20in%20Files%20tab%20in%20Teams%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-1646262%22%20slang%3D%22en-US%22%3E%3CP%3EHi%26nbsp%3B%3CA%20href%3D%22https%3A%2F%2Ftechcommunity.microsoft.com%2Ft5%2Fuser%2Fviewprofilepage%2Fuser-id%2F315126%22%20target%3D%22_blank%22%3E%40gustavo-IT%3C%2FA%3E%26nbsp%3B%2C%3C%2FP%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3CP%3ESharePoint%20wise%20you%20could%20set%20the%20default%20permissions%20when%20sharing%20say%20a%20link%20with%20Guests%20to%20view%2C%20but%20like%20it%20says%20that%20is%20just%20setting%20the%20defaults%20and%20is%20on%20a%20per%20doc%2Ffolder%20level.%3C%2FP%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3CP%3EYou%20could%20of%20course%20also%20use%20good%20old%20fashion%20SharePoint%20permissions%20and%20add%20the%20Guests%20with%20the%20necessary%20permission%20levels%20but%20that%20could%20become%20a%20nightmare%20to%20manage.%3C%2FP%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3CP%3EAnother%20problem%20is%20also%20the%20fact%20that%20by%20the%20very%20nature%20of%20a%20Team%2C%20you%20add%20members%20and%20have%20owners%20of%20Teams%20and%20they%20then%20by%20definition%2C%20SharePoint%20settings%20permitting%20when%20it%20comes%20to%20files%20have%20access%20to%20all%20parts%20of%20a%20Team%20with%20a%20few%20Teams%20Guest%20specific%20settings%20aside.%3CBR%20%2F%3E%3CBR%20%2F%3ESo%20you%20would%20effectively%20have%20to%20break%20the%20above%20cycle%20and%20then%20mess%20with%20the%20SharePoint%20permissions%20of%20the%20respective%20Channels%20folder%20or%20you%20could%20do%20it%20at%20the%20Default%20Shared%20Documents%20Library%20backing%20the%20Teams%20level.%3C%2FP%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3CP%3EAnother%20way%20to%20go%20would%20be%20to%20leave%20the%20Files%20tab%20alone%20and%20make%20use%20of%20a%20separate%20SharePoint%20document%20library%2C%20permission%20accordingly%20and%20surface%20in%20the%20Team%20by%20way%20of%20a%20Tab%20or%20a%20Cloud%20Storage%20Link.%20At%20least%20this%20way%20you%20can%20still%20manage%20the%20Team%20access%20with%20relative%20ease%20and%20know%20that%20you%20are%20not%20messing%20with%20permissions%20pertaining%20to%20the%20default%20storage%20location%20used%20by%20Teams.%3C%2FP%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3CP%3EThanks%3C%2FP%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3CP%3EHenry%3C%2FP%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3C%2FLINGO-BODY%3E
Occasional Contributor

Hi All

 

I created Azure guest accounts and consultants reported permission denied when accessing the Files tab in the Teams channel. I followed the instructions in this link https://docs.microsoft.com/en-US/sharepoint/change-external-sharing-site and changed from only people in your organization to existing guest users only. Problem solved. The files are accessible in the Files tab. 

Is there a way to set the permission to view only? if so how?

sharepoint.JPG

 

 

1 Reply
Best Response confirmed by ThereseSolimeno (Microsoft)
Solution

Hi @gustavo-IT ,

 

SharePoint wise you could set the default permissions when sharing say a link with Guests to view, but like it says that is just setting the defaults and is on a per doc/folder level.

 

You could of course also use good old fashion SharePoint permissions and add the Guests with the necessary permission levels but that could become a nightmare to manage.

 

Another problem is also the fact that by the very nature of a Team, you add members and have owners of Teams and they then by definition, SharePoint settings permitting when it comes to files have access to all parts of a Team with a few Teams Guest specific settings aside.

So you would effectively have to break the above cycle and then mess with the SharePoint permissions of the respective Channels folder or you could do it at the Default Shared Documents Library backing the Teams level.

 

Another way to go would be to leave the Files tab alone and make use of a separate SharePoint document library, permission accordingly and surface in the Team by way of a Tab or a Cloud Storage Link. At least this way you can still manage the Team access with relative ease and know that you are not messing with permissions pertaining to the default storage location used by Teams.

 

Thanks

 

Henry