Aug 30 2019 07:03 AM
Hi,
I've been reading and rereading all the info on Sharepoint sharing settings and guest users all day, but I still would like some confirmation on what I am seeing if anyone can help?
So, despite setting External Sharing to 'Existing guests' rather than 'New and existing guests', a user can still invite new Guests when creating a Team or Group?
When looking to lock down sharing on Office 365 I find myself pointed to information on sharepoint sharing, but it seems that is fairly useless if the sharepoint site is created through an office 365 group being created in Outlook or a new Team being setup?
Appreciate any feedback and any links that back this up, as i'd like to reference it in advice to others internally.
Thanks
Ross
Aug 30 2019 07:18 AM - edited Aug 30 2019 07:47 AM
Solution
So when looking at Groups this is controlled by the settings:
Office 365 Admin portal-> Settings -> Security and Privacy -> Sharing -> On/Off toggle
This gives you an on / off switch , for more details on this see this https://support.office.com/en-us/article/adding-guests-to-office-365-groups-bfc7a840-868f-4fd6-a390-....
You can also control this via the Azure Active Directory portal in a bit more of a granular way.
Azure Active Directory -> Users -> User Settings -> Manage External collaboration settings.
This gives you a bit more control, for all the details on this blade check out - https://docs.microsoft.com/en-us/azure/active-directory/b2b/delegate-invitations
There are also service specific settings on top of guest settings for external sharing:
So make sure you check OneDrive, Teams, PowerBI, Flow, Sway and Yammer admin portals.
Aug 30 2019 07:45 AM
Aug 30 2019 07:56 AM
Here are some additional links around external sharing for some Office365 services which have direct external sharing settings... (its not a complete list but should help with your discussions)
Aug 30 2019 07:18 AM - edited Aug 30 2019 07:47 AM
Solution
So when looking at Groups this is controlled by the settings:
Office 365 Admin portal-> Settings -> Security and Privacy -> Sharing -> On/Off toggle
This gives you an on / off switch , for more details on this see this https://support.office.com/en-us/article/adding-guests-to-office-365-groups-bfc7a840-868f-4fd6-a390-....
You can also control this via the Azure Active Directory portal in a bit more of a granular way.
Azure Active Directory -> Users -> User Settings -> Manage External collaboration settings.
This gives you a bit more control, for all the details on this blade check out - https://docs.microsoft.com/en-us/azure/active-directory/b2b/delegate-invitations
There are also service specific settings on top of guest settings for external sharing:
So make sure you check OneDrive, Teams, PowerBI, Flow, Sway and Yammer admin portals.