SOLVED

External Sharing and Guests

%3CLINGO-SUB%20id%3D%22lingo-sub-831286%22%20slang%3D%22en-US%22%3EExternal%20Sharing%20and%20Guests%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-831286%22%20slang%3D%22en-US%22%3E%3CP%3EHi%2C%3C%2FP%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3CP%3EI've%20been%20reading%20and%20rereading%20all%20the%20info%20on%20Sharepoint%20sharing%20settings%20and%20guest%20users%20all%20day%2C%20but%20I%20still%20would%20like%20some%20confirmation%20on%20what%20I%20am%20seeing%20if%20anyone%20can%20help%3F%3C%2FP%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3CP%3ESo%2C%20despite%20setting%20External%20Sharing%20to%20'Existing%20guests'%20rather%20than%20'New%20and%20existing%20guests'%2C%20a%20user%20can%20still%20invite%20new%20Guests%20when%20creating%20a%20Team%20or%20Group%3F%3C%2FP%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3CP%3EWhen%20looking%20to%20lock%20down%20sharing%20on%20Office%20365%20I%20find%20myself%20pointed%20to%20information%20on%20sharepoint%20sharing%2C%20but%20it%20seems%20that%20is%20fairly%20useless%20if%20the%20sharepoint%20site%20is%20created%20through%20an%20office%20365%20group%20being%20created%20in%20Outlook%20or%20a%20new%20Team%20being%20setup%3F%3C%2FP%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3CP%3EAppreciate%20any%20feedback%20and%20any%20links%20that%20back%20this%20up%2C%20as%20i'd%20like%20to%20reference%20it%20in%20advice%20to%20others%20internally.%3C%2FP%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3CP%3EThanks%3C%2FP%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3CP%3ERoss%3C%2FP%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3C%2FLINGO-BODY%3E%3CLINGO-LABS%20id%3D%22lingo-labs-831286%22%20slang%3D%22en-US%22%3E%3CLINGO-LABEL%3EOffice%20365%3C%2FLINGO-LABEL%3E%3C%2FLINGO-LABS%3E%3CLINGO-SUB%20id%3D%22lingo-sub-831364%22%20slang%3D%22en-US%22%3ERe%3A%20External%20Sharing%20and%20Guests%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-831364%22%20slang%3D%22en-US%22%3E%3CP%3E%3CA%20href%3D%22https%3A%2F%2Ftechcommunity.microsoft.com%2Ft5%2Fuser%2Fviewprofilepage%2Fuser-id%2F7791%22%20target%3D%22_blank%22%3E%40Iain%20Fielding%3C%2FA%3E%26nbsp%3B%3C%2FP%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3CP%3EThanks%20Iain.%26nbsp%3B%20Its%20settling%20in%20my%20head%20now!%3C%2FP%3E%3C%2FLINGO-BODY%3E%3CLINGO-SUB%20id%3D%22lingo-sub-831317%22%20slang%3D%22en-US%22%3ERe%3A%20External%20Sharing%20and%20Guests%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-831317%22%20slang%3D%22en-US%22%3E%3CP%3E%3CA%20href%3D%22https%3A%2F%2Ftechcommunity.microsoft.com%2Ft5%2Fuser%2Fviewprofilepage%2Fuser-id%2F399018%22%20target%3D%22_blank%22%3E%40rosswestgarthnorfolk%3C%2FA%3E%26nbsp%3B%3C%2FP%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3CP%3ESo%20when%20looking%20at%20Groups%20this%20is%20controlled%20by%20the%20settings%3A%3C%2FP%3E%3CP%3EOffice%20365%20Admin%20portal-%26gt%3B%20Settings%20-%26gt%3B%20Security%20and%20Privacy%20-%26gt%3B%20Sharing%20-%26gt%3B%20On%2FOff%20toggle%3C%2FP%3E%3CP%3E%3CSPAN%20class%3D%22lia-inline-image-display-wrapper%20lia-image-align-inline%22%20style%3D%22width%3A%20400px%3B%22%3E%3CIMG%20src%3D%22https%3A%2F%2Fgxcuf89792.i.lithium.com%2Ft5%2Fimage%2Fserverpage%2Fimage-id%2F129366i54AB740A7CE27CA9%2Fimage-size%2Fmedium%3Fv%3D1.0%26amp%3Bpx%3D400%22%20alt%3D%22clipboard_image_1.png%22%20title%3D%22clipboard_image_1.png%22%20%2F%3E%3C%2FSPAN%3E%3C%2FP%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3CP%3EThis%20gives%20you%20an%20on%20%2F%20off%20switch%20%2C%20for%20more%20details%20on%20this%20see%20this%20%3CA%20href%3D%22https%3A%2F%2Fsupport.office.com%2Fen-us%2Farticle%2Fadding-guests-to-office-365-groups-bfc7a840-868f-4fd6-a390-f347bf51aff6%22%20target%3D%22_blank%22%20rel%3D%22noopener%20noopener%20noreferrer%20noopener%20noreferrer%20noopener%20noreferrer%22%3Ehttps%3A%2F%2Fsupport.office.com%2Fen-us%2Farticle%2Fadding-guests-to-office-365-groups-bfc7a840-868f-4fd6-a390-f347bf51aff6%3C%2FA%3E.%3C%2FP%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3CP%3EYou%20can%20also%20control%20this%20via%20the%20Azure%20Active%20Directory%20portal%20in%20a%20bit%20more%20of%20a%20granular%20way.%3C%2FP%3E%3CP%3EAzure%20Active%20Directory%20-%26gt%3B%20Users%20-%26gt%3B%20User%20Settings%20-%26gt%3B%20Manage%20External%20collaboration%20settings.%3C%2FP%3E%3CP%3E%3CSPAN%20class%3D%22lia-inline-image-display-wrapper%20lia-image-align-inline%22%20style%3D%22width%3A%20400px%3B%22%3E%3CIMG%20src%3D%22https%3A%2F%2Fgxcuf89792.i.lithium.com%2Ft5%2Fimage%2Fserverpage%2Fimage-id%2F129370i39FAE1F377098619%2Fimage-size%2Fmedium%3Fv%3D1.0%26amp%3Bpx%3D400%22%20alt%3D%22clipboard_image_2.png%22%20title%3D%22clipboard_image_2.png%22%20%2F%3E%3C%2FSPAN%3E%3C%2FP%3E%3CP%3EThis%20gives%20you%20a%20bit%20more%20control%2C%20for%20all%20the%20details%20on%20this%20blade%20check%20out%20-%26nbsp%3B%3CA%20href%3D%22https%3A%2F%2Fdocs.microsoft.com%2Fen-us%2Fazure%2Factive-directory%2Fb2b%2Fdelegate-invitations%22%20target%3D%22_blank%22%20rel%3D%22noopener%20noopener%20noreferrer%20noopener%20noreferrer%20noopener%20noreferrer%22%3Ehttps%3A%2F%2Fdocs.microsoft.com%2Fen-us%2Fazure%2Factive-directory%2Fb2b%2Fdelegate-invitations%3C%2FA%3E%3C%2FP%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3CP%3EThere%20are%20also%20service%20specific%20settings%20on%20top%20of%20guest%20settings%20for%20external%20sharing%3A%3C%2FP%3E%3CP%3ESo%20make%20sure%20you%20check%20OneDrive%2C%20Teams%2C%20PowerBI%2C%20Flow%2C%20Sway%20and%20Yammer%20admin%20portals.%3C%2FP%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3C%2FLINGO-BODY%3E%3CLINGO-SUB%20id%3D%22lingo-sub-831377%22%20slang%3D%22en-US%22%3ERe%3A%20External%20Sharing%20and%20Guests%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-831377%22%20slang%3D%22en-US%22%3E%3CP%3E%3CA%20href%3D%22https%3A%2F%2Ftechcommunity.microsoft.com%2Ft5%2Fuser%2Fviewprofilepage%2Fuser-id%2F399018%22%20target%3D%22_blank%22%3E%40rosswestgarthnorfolk%3C%2FA%3E%26nbsp%3B%3C%2FP%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3CP%3EHere%20are%20some%20additional%20links%20around%20external%20sharing%20for%20some%20Office365%20services%20which%20have%20direct%20external%20sharing%20settings...%20(its%20not%20a%20complete%20list%20but%20should%20help%20with%20your%20discussions)%26nbsp%3B%3C%2FP%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3CUL%3E%3CLI%3E%3CA%20href%3D%22https%3A%2F%2Fdocs.microsoft.com%2Fen-us%2Fonedrive%2Fmanage-sharing%22%20target%3D%22_blank%22%20rel%3D%22noopener%20noopener%20noreferrer%20noopener%20noreferrer%22%3EOneDrive%20for%20Business%3C%2FA%3E%3C%2FLI%3E%3CLI%3E%3CA%20href%3D%22https%3A%2F%2Fdocs.microsoft.com%2Fen-us%2Fmicrosoftteams%2Fmanage-external-access%22%20target%3D%22_blank%22%20rel%3D%22noopener%20noopener%20noreferrer%20noopener%20noreferrer%22%3EMicrosoft%20Teams%3C%2FA%3E%3C%2FLI%3E%3CLI%3E%3CA%20href%3D%22https%3A%2F%2Fdocs.microsoft.com%2Fen-us%2FYammer%2Fwork-with-external-users%2Fdisable-external-messaging%22%20target%3D%22_blank%22%20rel%3D%22noopener%20noopener%20noreferrer%20noopener%20noreferrer%22%3EYammer%3C%2FA%3E%3C%2FLI%3E%3CLI%3E%3CA%20href%3D%22https%3A%2F%2Fflow.microsoft.com%2Fen-us%2Fblog%2Fintroducing-data-loss-prevention%2F%22%20target%3D%22_blank%22%20rel%3D%22noopener%20noopener%20noreferrer%20noopener%20noreferrer%22%3EFlow%3C%2FA%3E%3C%2FLI%3E%3CLI%3E%3CA%20href%3D%22https%3A%2F%2Fsupport.office.com%2Fen-us%2Farticle%2FAdministrator-settings-for-Sway-d298e79b-b6ab-44c6-9239-aa312f5784d4%22%20target%3D%22_blank%22%20rel%3D%22noopener%20noopener%20noreferrer%20noopener%20noreferrer%22%3ESway%3C%2FA%3E%3C%2FLI%3E%3CLI%3E%3CA%20href%3D%22https%3A%2F%2Fdocs.microsoft.com%2Fen-us%2Fpower-bi%2Fservice-admin-portal%23export-and-sharing-settings%22%20target%3D%22_blank%22%20rel%3D%22noopener%20noopener%20noreferrer%20noopener%20noreferrer%22%3EPowerBI%3C%2FA%3E%3C%2FLI%3E%3C%2FUL%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3C%2FLINGO-BODY%3E
Highlighted
New Contributor

Hi,

 

I've been reading and rereading all the info on Sharepoint sharing settings and guest users all day, but I still would like some confirmation on what I am seeing if anyone can help?

 

So, despite setting External Sharing to 'Existing guests' rather than 'New and existing guests', a user can still invite new Guests when creating a Team or Group?

 

When looking to lock down sharing on Office 365 I find myself pointed to information on sharepoint sharing, but it seems that is fairly useless if the sharepoint site is created through an office 365 group being created in Outlook or a new Team being setup?

 

Appreciate any feedback and any links that back this up, as i'd like to reference it in advice to others internally.

 

Thanks

 

Ross

 

3 Replies
Highlighted
Best Response confirmed by Chris Webb (MVP)
Solution

@rosswestgarthnorfolk 

 

So when looking at Groups this is controlled by the settings:

Office 365 Admin portal-> Settings -> Security and Privacy -> Sharing -> On/Off toggle

clipboard_image_1.png

 

This gives you an on / off switch , for more details on this see this https://support.office.com/en-us/article/adding-guests-to-office-365-groups-bfc7a840-868f-4fd6-a390-....

 

You can also control this via the Azure Active Directory portal in a bit more of a granular way.

Azure Active Directory -> Users -> User Settings -> Manage External collaboration settings.

clipboard_image_2.png

This gives you a bit more control, for all the details on this blade check out - https://docs.microsoft.com/en-us/azure/active-directory/b2b/delegate-invitations

 

There are also service specific settings on top of guest settings for external sharing:

So make sure you check OneDrive, Teams, PowerBI, Flow, Sway and Yammer admin portals.

 

Highlighted

@Iain Fielding 

 

Thanks Iain.  Its settling in my head now!

Highlighted

@rosswestgarthnorfolk 

 

Here are some additional links around external sharing for some Office365 services which have direct external sharing settings... (its not a complete list but should help with your discussions)