Microsoft Tech Community Live:  Microsoft Teams Edition
November 09, 2021, 08:00 AM - 12:00 PM (PST)

Guest Users

%3CLINGO-SUB%20id%3D%22lingo-sub-2757531%22%20slang%3D%22en-US%22%3EGuest%20Users%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-2757531%22%20slang%3D%22en-US%22%3E%3CP%3EAre%20Guest%20Users%20that%20are%20added%20to%20a%20Teams%20part%20of%20the%20Members%20Group%20in%20SharePoint%3F%26nbsp%3B%20If%20I%20want%20to%20restrict%20the%20Guest%20from%20accessing%20a%20particular%20library%2C%20how%20would%20I%20do%20that%3F%3C%2FP%3E%3C%2FLINGO-BODY%3E%3CLINGO-LABS%20id%3D%22lingo-labs-2757531%22%20slang%3D%22en-US%22%3E%3CLINGO-LABEL%3EGuest%20Access%3C%2FLINGO-LABEL%3E%3C%2FLINGO-LABS%3E%3CLINGO-SUB%20id%3D%22lingo-sub-2758799%22%20slang%3D%22en-US%22%3ERe%3A%20Guest%20Users%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-2758799%22%20slang%3D%22en-US%22%3ETeams%20is%20backed%20by%20Microsoft%20365%20Groups%20which%20technically%20only%20support%20two%20user%20types%3A%20owners%20or%20members.%20This%20means%20that%20anyone%20added%20to%20a%20team%20in%20Teams%20is%20added%20as%20a%20member%20by%20default%20in%20the%20backend%20Microsoft%20365%20Group.%20This%20group%20also%20provides%20access%20to%20the%20associated%20SharePoint%20site.%3CBR%20%2F%3E%3CBR%20%2F%3ETo%20be%20honest%2C%20although%20one%20can%20manage%20the%20SharePoint%20permissions%20outside%20of%20Teams%20-%20directly%20in%20SharePoint%20-%20it%20will%20probably%20cause%20more%20headaches%20in%20the%20long%20term.%20It%20is%20possible%20though.%3C%2FLINGO-BODY%3E
Contributor

Are Guest Users that are added to a Teams part of the Members Group in SharePoint?  If I want to restrict the Guest from accessing a particular library, how would I do that?

4 Replies
Teams is backed by Microsoft 365 Groups which technically only support two user types: owners or members. This means that anyone added to a team in Teams is added as a member by default in the backend Microsoft 365 Group. This group also provides access to the associated SharePoint site.

To be honest, although one can manage the SharePoint permissions outside of Teams - directly in SharePoint - it will probably cause more headaches in the long term. It is possible though.
In addition to the above reply. In case you're using Sensitivity labels with MCAS that can be used to control access to a separate library as well.

@pvanberlo Thank you.  It would make it easier if you could pick within an O365 Group/Teams to add them as Visitors vs Members, which would help in the associated SharePoint site.  Seems like if there are connected, they should somewhat act the same.

@ChristianJBergstrom I could try the Sensitivity Labels, we have just started testing them out. Thanks for the suggestion.