Microsoft Tech Community Live:  Microsoft Teams Edition
November 09, 2021, 08:00 AM - 12:00 PM (PST)

Teams Live Events - any changes since Nov 2020 that impact Cross-Tenant permissions for Live Events?

%3CLINGO-SUB%20id%3D%22lingo-sub-2239788%22%20slang%3D%22en-US%22%3ETeams%20Live%20Events%20-%20any%20changes%20since%20Nov%202020%20that%20impact%20Cross-Tenant%20permissions%20for%20Live%20Events%3F%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-2239788%22%20slang%3D%22en-US%22%3E%3CDIV%20class%3D%22_3xX726aBn29LDbsDtzr_6E%20_1Ap4F5maDtT1E1YuCiaO0r%20D3IL3FD0RFy_mkKLPwL4%22%3E%3CDIV%20class%3D%22_292iotee39Lmt0MkQZ2hPV%20RichTextJSON-root%22%3E%3CP%20class%3D%22_1qeIAgB0cPwnLhDF9XSiJM%22%3ESome%20time%20after%20November%202020%2C%20we%20noticed%20that%20certain%20types%20of%20cross-tenants%20guests%20(namely%20those%20on%20%3CSTRONG%3EMS%20365%20Businesss%20plans%20%3C%2FSTRONG%3Eand%20%3CSTRONG%3ETeams%20Free%20accounts%3C%2FSTRONG%3E)%20can%20%3CSTRONG%3Enot%3C%2FSTRONG%3E%20join%20reliably%20as%20Producers%20in%20Teams%20Live%20Events%20that%20I%20create%20(I%20am%20on%20a%20E3%2FE5%20licence)%2C%20whereas%20Enterprise%20Users%20still%20seem%20to%20be%20able%20to%20particpate%20as%20Producers.%20In%20test%20Live%20Events%2C%20when%20the%20non-Enterprise%20user%20clicks%20%22Join%20Live%20Event%22%20(invited%20as%20a%20%3CSTRONG%3EProducer%20or%20Presenter%3C%2FSTRONG%3E)%20%3CU%3Ethey%20instead%20only%20enter%3C%2FU%3E%20the%20meeting%20%3CSTRONG%3Eas%20an%20Attendee%3C%2FSTRONG%3E.%3C%2FP%3E%3CP%20class%3D%22_1qeIAgB0cPwnLhDF9XSiJM%22%3E%26nbsp%3B%3C%2FP%3E%3CP%20class%3D%22_1qeIAgB0cPwnLhDF9XSiJM%22%3E%3CSTRONG%3EInitial%20Testing%3C%2FSTRONG%3E%3C%2FP%3E%3CP%20class%3D%22_1qeIAgB0cPwnLhDF9XSiJM%22%3EI've%20done%20some%20reasonably%20rigourous%20testing%20since%20experiencing%20initial%20problems.%20To%20do%20so%2C%20I%20created%20two%20test%20Team%20Free%20accounts%2C%20%3CA%20href%3D%22mailto%3Atestoutlook%40outlook.com%22%20target%3D%22_blank%22%20rel%3D%22noopener%20nofollow%20ugc%20noreferrer%22%3Etestoutlook%40outlook.com%3C%2FA%3E%20and%20the%20other%20at%20%3CA%20href%3D%22mailto%3Atestyandex%40yandex.com%22%20target%3D%22_blank%22%20rel%3D%22noopener%20nofollow%20ugc%20noreferrer%22%3Etestyandex%40yandex.com%3C%2FA%3E%20(verified%20as%20primary%20alias%20for%20a%20hotmail.com%20address)%20on%20a%20second%20machine.%20I%20validated%20both%20of%20the%20accounts%20and%20signed-up%20for%20Teams%20Free%20(which%20seems%20to%20be%20needed%20in%20addition%20to%20the%20MS%20accounts%20alone).%20From%20my%20first%20machine%20(the%20Live%20Event%20host%20on%20E3%20licence)%2C%20I%20added%20both%20test%20users%20to%20a%20Team%20(%3CA%20href%3D%22https%3A%2F%2Fdocs.microsoft.com%2Fen-gb%2Fmicrosoftteams%2Fteams-live-events%2Fplan-for-teams-live-events%22%20target%3D%22_blank%22%20rel%3D%22noopener%20ugc%20noreferrer%22%3Erequired%20by%20MS%20for%20guest%20accounts%2Fparticipation%3C%2FA%3E)%2C%20created%20five%20Live%20Events%20and%20invited%20each%20of%20these%20accounts%20in%20various%20roles%20-%20Producer%20and%20Presenters.%20In%20my%20experiments%20I%20tried%20different%20things%2C%20such%20as%3A%3C%2FP%3E%3CUL%20class%3D%22_33MEMislY0GAlB78wL1_CR%22%3E%3CLI%3E%3CP%20class%3D%22_1qeIAgB0cPwnLhDF9XSiJM%22%3Eaccepting%20or%20not%20accepting%20the%20invited%20users%20(on%20second%20machine)%3C%2FP%3E%3C%2FLI%3E%3CLI%3E%3CP%20class%3D%22_1qeIAgB0cPwnLhDF9XSiJM%22%3Esigning%20into%20Teams%20app%20first%2C%20or%20signing%20out%20before%20%22Join%5Bing%5D%20Live%20Event%22%3C%2FP%3E%3C%2FLI%3E%3CLI%3E%3CP%20class%3D%22_1qeIAgB0cPwnLhDF9XSiJM%22%3Ehaving%20the%20test%20guest%20account%20join%20after%20the%20host%20and%20before%3C%2FP%3E%3C%2FLI%3E%3CLI%3E%3CP%20class%3D%22_1qeIAgB0cPwnLhDF9XSiJM%22%3Elaunching%20the%20meeting%20on%20the%20test%20accounts%3C%2FP%3E%3C%2FLI%3E%3CLI%3E%3CP%20class%3D%22_1qeIAgB0cPwnLhDF9XSiJM%22%3Erebooting%20the%20second%20machine%20between%20test%20meetings%20to%20clear%20cache%3C%2FP%3E%3C%2FLI%3E%3C%2FUL%3E%3CP%20class%3D%22_1qeIAgB0cPwnLhDF9XSiJM%22%3E%3CSTRONG%3EInitial%20Observations%3C%2FSTRONG%3E%3C%2FP%3E%3CP%20class%3D%22_1qeIAgB0cPwnLhDF9XSiJM%22%3EWhat%20I%20can%20tell%20you%20is%20that%20there%20were%20%3CEM%3E%3CSTRONG%3Eno%20clear%20patterns%3C%2FSTRONG%3E%3C%2FEM%3E%20in%20the%20results%2C%20as%20follows%3A%3C%2FP%3E%3CUL%20class%3D%22_33MEMislY0GAlB78wL1_CR%22%3E%3CLI%3E%3CP%20class%3D%22_1qeIAgB0cPwnLhDF9XSiJM%22%3Esometimes%20the%20test%20accounts%20signed-in%20as%20Producer%20when%20invited%20as%20Producer%3C%2FP%3E%3C%2FLI%3E%3CLI%3E%3CP%20class%3D%22_1qeIAgB0cPwnLhDF9XSiJM%22%3Esometimes%20the%20test%20account%20would%20sign-in%20as%20a%20Presenter%20when%20invited%20as%20a%20Producer%3C%2FP%3E%3C%2FLI%3E%3CLI%3E%3CP%20class%3D%22_1qeIAgB0cPwnLhDF9XSiJM%22%3Esometimes%20the%20test%20accounts%20would%20sign-in%20as%20%3CEM%3EAttendee%3C%2FEM%3E%20when%20invited%20as%20either%20Prod%2FPresent%3C%2FP%3E%3C%2FLI%3E%3CLI%3E%3CP%20class%3D%22_1qeIAgB0cPwnLhDF9XSiJM%22%3Esometimes%20the%20test%20accounts%20would%20sign-into%20the%20meeitng%20as%20Producer%20but%20show%20in%20Presenter%3C%2FP%3E%3C%2FLI%3E%3CLI%3E%3CP%20class%3D%22_1qeIAgB0cPwnLhDF9XSiJM%22%3Esometimes%20the%20Teams%20app%20on%20the%20guest%20test%20machine%20would%20prompt%20for%20%22Which%20group%3F%22%3C%2FP%3E%3C%2FLI%3E%3CLI%3E%3CP%20class%3D%22_1qeIAgB0cPwnLhDF9XSiJM%22%3Esometimes%20the%20Teams%20app%20would%20%22run%20into%20problems%22%20(%22collecting%20info%22)%3C%2FP%3E%3C%2FLI%3E%3CLI%3E%3CP%20class%3D%22_1qeIAgB0cPwnLhDF9XSiJM%22%3Esomes%20the%20Teams%20app%20would%20fail%20to%20load%3C%2FP%3E%3C%2FLI%3E%3C%2FUL%3E%3CP%20class%3D%22_1qeIAgB0cPwnLhDF9XSiJM%22%3E%3CSTRONG%3EInitial%20conclusions%3C%2FSTRONG%3E%3C%2FP%3E%3CP%20class%3D%22_1qeIAgB0cPwnLhDF9XSiJM%22%3ENone%20of%20the%20testing%20demonstrated%20any%20repeatability%20and%20as%20such%20%3CSTRONG%3EI%20have%20absolutely%20NO%20confidence%3C%2FSTRONG%3E%20in%20my%20ability%20to%20succesfully%20run%20a%20meeting%20with%20five%20presenters%20on%20Tuesday%20(two%20of%20which%20are%20Teams%20Free%20users)%20and%20150%20attendees.%3C%2FP%3E%3CP%20class%3D%22_1qeIAgB0cPwnLhDF9XSiJM%22%3E%26nbsp%3B%3C%2FP%3E%3CP%20class%3D%22_1qeIAgB0cPwnLhDF9XSiJM%22%3E%3CSTRONG%3EFurther%20testing%3C%2FSTRONG%3E%3C%2FP%3E%3CP%20class%3D%22_1qeIAgB0cPwnLhDF9XSiJM%22%3EI%20just%20held%20a%20test%20meeting%20with%20two%20real%20humans%20(one%20on%20a%20MS%20365%20Business%20Plan%20and%20one%20a%20Teams%20Free%20user).%20%3CSTRONG%3EWhat%20we%20discovered%20out%20of%20that%20event%20was%3C%2FSTRONG%3E%20that%20if%20the%20MS%20365%20Business%20Plan%20user%20joins%20the%20Live%20Event%20from%20his%20%3CEM%3ETeams%20Calendar%3C%2FEM%3E%20using%20%22Join%20Live%20Event%22%2C%20he%20gets%20%3CSTRONG%3Ekicked%3C%2FSTRONG%3E%20to%20%3CSTRONG%3EAttendee%20only%3C%2FSTRONG%3E%2C%20but%20if%20he%20joins%20using%20%22Join%20Live%20Event%22%20from%20his%20%3CEM%3EOutlook%20Calendar%3C%2FEM%3E%2C%20he%20correctly%20connects%20as%20Producer.%20I%20had%20them%20both%20rejoin%20four%20times%20and%20this%20behaviour%20was%20repeated%20-%20however%2C%20I%20know%20that%20doesn't%20gel%20with%20my%20testaccount%20experience%20above%20perfectly%20-%20so%20far%2C%20this%20is%20a%20working%20theory.%3C%2FP%3E%3CP%20class%3D%22_1qeIAgB0cPwnLhDF9XSiJM%22%3E%26nbsp%3B%3C%2FP%3E%3CP%20class%3D%22_1qeIAgB0cPwnLhDF9XSiJM%22%3E%3CSTRONG%3EHave%20there%20been%20any%20changes%20to%20Teams%20permissions%20that%20would%20negatively%20impact%20rights%20of%20Cross-Tenant%20Producers%20in%20Live%20Events%3F%3C%2FSTRONG%3E%3C%2FP%3E%3CP%20class%3D%22_1qeIAgB0cPwnLhDF9XSiJM%22%3E%26nbsp%3B%3C%2FP%3E%3CP%20class%3D%22_1qeIAgB0cPwnLhDF9XSiJM%22%3EIf%20anyone%20is%20willing%2C%20I%20am%20happy%20to%20add%20you%20to%20my%20Team%20and%20set%20up%20a%20test%20Live%20Event.%3C%2FP%3E%3C%2FDIV%3E%3C%2FDIV%3E%3C%2FLINGO-BODY%3E%3CLINGO-LABS%20id%3D%22lingo-labs-2239788%22%20slang%3D%22en-US%22%3E%3CLINGO-LABEL%3EGuest%20Access%3C%2FLINGO-LABEL%3E%3CLINGO-LABEL%3ELive%20Events%3C%2FLINGO-LABEL%3E%3CLINGO-LABEL%3EMicrosoft%20Teams%3C%2FLINGO-LABEL%3E%3C%2FLINGO-LABS%3E%3CLINGO-SUB%20id%3D%22lingo-sub-2239922%22%20slang%3D%22en-US%22%3ERe%3A%20Teams%20Live%20Events%20-%20any%20changes%20since%20Nov%202020%20that%20impact%20Cross-Tenant%20permissions%20for%20Live%20Eve%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-2239922%22%20slang%3D%22en-US%22%3E%3CP%3E%3CA%20href%3D%22https%3A%2F%2Ftechcommunity.microsoft.com%2Ft5%2Fuser%2Fviewprofilepage%2Fuser-id%2F580756%22%20target%3D%22_blank%22%3E%40juzzle5%3C%2FA%3E%26nbsp%3B%3C%2FP%3E%0A%3CP%3E%26nbsp%3B%3C%2FP%3E%0A%3CP%3EI've%20not%20heard%20of%20any%20change%2C%20but%20in%20my%20experience%20the%20only%20way%20currently%20to%20make%20the%20experience%20at%20all%20reliable%20is%20to%20add%20presenters%20to%20a%20team%20in%20your%20tenant%20as%20a%20guest.%20Anything%20else%20relies%20on%20a%20match%20happening%20between%20their%20login%20account%20and%20what%20you%20invite%2C%20highly%20unpredictable.%3C%2FP%3E%0A%3CP%3E%26nbsp%3B%3C%2FP%3E%0A%3CP%3EThe%20good%20news%20is%20the%20announcement%20in%20Message%20Center%20that%20anonymous%20guests%20will%20be%20available%20for%20Live%20Meetings%20at%20some%20point%20in%20the%20near%20future.%20As%20a%20producer%20you%20can%20just%20admit%20anyone%20from%20the%20lobby%20like%20a%20regular%20Teams%20Meeting.%3C%2FP%3E%3C%2FLINGO-BODY%3E%3CLINGO-SUB%20id%3D%22lingo-sub-2239926%22%20slang%3D%22en-US%22%3ERe%3A%20Teams%20Live%20Events%20-%20any%20changes%20since%20Nov%202020%20that%20impact%20Cross-Tenant%20permissions%20for%20Live%20Eve%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-2239926%22%20slang%3D%22en-US%22%3EThanks%20Steven%2C%20yes%2C%20the%20guests%20I%20had%20added%20to%20Teams%20Live%20Events%20as%20Producers%20and%20Presenters%20are%20already%20added%20to%20a%20host%20tenant's%20Team%20-%20I%20have%20always%20done%20this%2C%20and%20did%20so%20for%20the%20testing%20above%20-%20the%20issue%20is%20that%20something%20seems%20to%20have%20changed%20which%20makes%20their%20ability%20to%20join%20unreliable.%3C%2FLINGO-BODY%3E%3CLINGO-SUB%20id%3D%22lingo-sub-2239936%22%20slang%3D%22en-US%22%3ERe%3A%20Teams%20Live%20Events%20-%20any%20changes%20since%20Nov%202020%20that%20impact%20Cross-Tenant%20permissions%20for%20Live%20Eve%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-2239936%22%20slang%3D%22en-US%22%3E%3CP%3E%3CA%20href%3D%22https%3A%2F%2Ftechcommunity.microsoft.com%2Ft5%2Fuser%2Fviewprofilepage%2Fuser-id%2F580756%22%20target%3D%22_blank%22%3E%40juzzle5%3C%2FA%3E%26nbsp%3BAre%20they%20switching%20to%20your%20tenant%20before%20joining%2C%20and%20did%20you%20invite%20them%20as%20their%20(Guest)%20account%3F%20This%20is%20all%20important%20so%20Teams%20recognises%20them%20as%20the%20entitled%20user.%3C%2FP%3E%0A%3CP%3E%26nbsp%3B%3C%2FP%3E%0A%3CP%3EI've%20not%20tried%20a%20Business%20Account%20before%2C%20maybe%20something%20interferes%20as%20they%20don't%20have%20entitlement%20to%20use%20Live%20Events.%20I've%20only%20ever%20tried%20externals%20with%20MSA%20or%20an%20E%20account.%20I've%20also%20given%20people%20E%20accounts%20in%20a%20free%20trial%20tenant%20then%20invited%20them%20as%20guests%20from%20there.%3C%2FP%3E%3C%2FLINGO-BODY%3E%3CLINGO-SUB%20id%3D%22lingo-sub-2239937%22%20slang%3D%22en-US%22%3ERe%3A%20Teams%20Live%20Events%20-%20any%20changes%20since%20Nov%202020%20that%20impact%20Cross-Tenant%20permissions%20for%20Live%20Eve%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-2239937%22%20slang%3D%22en-US%22%3EYou've%20touched%20on%20something%20which%20I%20starting%20to%20think%20is%20the%20key%20issue%20here%2C%20and%20something%20which%20is%20broken%20with%20Teams.%20As%20I%20understand%20it%2C%20for%20guests%20that%20clicked%20on%20the%20Join%20%22Teams%20Live%20Event%22%20link%2C%20I%20believe%20that%20Teams%20used%20to%20switch%20tenant%20automatically%2C%20however%2C%20that%20appears%20to%20be%20the%20root%20problem%20-%20it%20is%20not!%20Making%20matters%20worse%2C%20for%20the%20MS%20365%20Business%20guest%20used%2C%20his%20Tenant%20switcher%20(the%20drop%20down%20top%20right)%20only%20shows%20his%20organisation%20-%20not%20the%20one%20which%20owns%20the%20team%20to%20which%20he%20was%20added.%3C%2FLINGO-BODY%3E
Occasional Contributor

Some time after November 2020, we noticed that certain types of cross-tenants guests (namely those on MS 365 Businesss plans and Teams Free accounts) can not join reliably as Producers in Teams Live Events that I create (I am on a E3/E5 licence), whereas Enterprise Users still seem to be able to particpate as Producers. In test Live Events, when the non-Enterprise user clicks "Join Live Event" (invited as a Producer or Presenter) they instead only enter the meeting as an Attendee.

 

Initial Testing

I've done some reasonably rigourous testing since experiencing initial problems. To do so, I created two test Team Free accounts, testoutlook@outlook.com and the other at testyandex@yandex.com (verified as primary alias for a hotmail.com address) on a second machine. I validated both of the accounts and signed-up for Teams Free (which seems to be needed in addition to the MS accounts alone). From my first machine (the Live Event host on E3 licence), I added both test users to a Team (required by MS for guest accounts/participation), created five Live Events and invited each of these accounts in various roles - Producer and Presenters. In my experiments I tried different things, such as:

  • accepting or not accepting the invited users (on second machine)

  • signing into Teams app first, or signing out before "Join[ing] Live Event"

  • having the test guest account join after the host and before

  • launching the meeting on the test accounts

  • rebooting the second machine between test meetings to clear cache

Initial Observations

What I can tell you is that there were no clear patterns in the results, as follows:

  • sometimes the test accounts signed-in as Producer when invited as Producer

  • sometimes the test account would sign-in as a Presenter when invited as a Producer

  • sometimes the test accounts would sign-in as Attendee when invited as either Prod/Present

  • sometimes the test accounts would sign-into the meeitng as Producer but show in Presenter

  • sometimes the Teams app on the guest test machine would prompt for "Which group?"

  • sometimes the Teams app would "run into problems" ("collecting info")

  • somes the Teams app would fail to load

Initial conclusions

None of the testing demonstrated any repeatability and as such I have absolutely NO confidence in my ability to succesfully run a meeting with five presenters on Tuesday (two of which are Teams Free users) and 150 attendees.

 

Further testing

I just held a test meeting with two real humans (one on a MS 365 Business Plan and one a Teams Free user). What we discovered out of that event was that if the MS 365 Business Plan user joins the Live Event from his Teams Calendar using "Join Live Event", he gets kicked to Attendee only, but if he joins using "Join Live Event" from his Outlook Calendar, he correctly connects as Producer. I had them both rejoin four times and this behaviour was repeated - however, I know that doesn't gel with my testaccount experience above perfectly - so far, this is a working theory.

 

Have there been any changes to Teams permissions that would negatively impact rights of Cross-Tenant Producers in Live Events?

 

If anyone is willing, I am happy to add you to my Team and set up a test Live Event.

6 Replies

@juzzle5 

 

I've not heard of any change, but in my experience the only way currently to make the experience at all reliable is to add presenters to a team in your tenant as a guest. Anything else relies on a match happening between their login account and what you invite, highly unpredictable.

 

The good news is the announcement in Message Center that anonymous guests will be available for Live Meetings at some point in the near future. As a producer you can just admit anyone from the lobby like a regular Teams Meeting.

Thanks Steven, yes, the guests I had added to Teams Live Events as Producers and Presenters are already added to a host tenant's Team - I have always done this, and did so for the testing above - the issue is that something seems to have changed which makes their ability to join unreliable.

@juzzle5 Are they switching to your tenant before joining, and did you invite them as their (Guest) account? This is all important so Teams recognises them as the entitled user.

 

I've not tried a Business Account before, maybe something interferes as they don't have entitlement to use Live Events. I've only ever tried externals with MSA or an E account. I've also given people E accounts in a free trial tenant then invited them as guests from there.

You've touched on something which I starting to think is the key issue here, and something which is broken with Teams. As I understand it, for guests that clicked on the Join "Teams Live Event" link, I believe that Teams used to switch tenant automatically, however, that appears to be the root problem - it is not! Making matters worse, for the MS 365 Business guest used, his Tenant switcher (the drop down top right) only shows his organisation - not the one which owns the team to which he was added.
Yes, I am ensuring that they switch organisations before joining the Live Event, I have confirmed they have accepted the invite to the team, and I have verified they can see the team in their app. But so far, I've clarified that:

365 Enterprise licencees can partipcate as Presenters
365 Business licencees CAN NOT partipcate as Presenters
Team Free licencees can partipcate as Presenters

@juzzle5 

 

Have you tried the new Allow Anonymous switch that is just below the selection for external, to me it seems to turn the meeting into a regular Teams meeting that anyone with the link can join (subject to you admitting them from the lobby).

 

Interesting about the licenses entitlements carrying through, maybe if the new option doesn't help  would raise a support request as that's perhaps a bug rather than something intentional.