SOLVED

How to Grant Everyone/All Authenticated claims to external users in O365?

%3CLINGO-SUB%20id%3D%22lingo-sub-180310%22%20slang%3D%22en-US%22%3EHow%20to%20Grant%20Everyone%2FAll%20Authenticated%20claims%20to%20external%20users%20in%20O365%3F%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-180310%22%20slang%3D%22en-US%22%3E%3CP%3EHi%2C%3C%2FP%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3CP%3EFrom%20March%2023rd%2C%20after%20Microsoft%20%3CSPAN%3Eupdating%26nbsp%3Bthe%20behavior%20and%20governance%20of%20access%20by%20external%20users%20in%20Office%20365(%3CA%20href%3D%22https%3A%2F%2Fsupport.microsoft.com%2Fen-hk%2Fhelp%2F4089534%2Fhow-to-grant-the-everyone-claim-to-external-users-in-office-365%22%20target%3D%22_blank%22%20rel%3D%22noopener%20noreferrer%20noopener%20noreferrer%22%3Ehttps%3A%2F%2Fsupport.microsoft.com%2Fen-hk%2Fhelp%2F4089534%2Fhow-to-grant-the-everyone-claim-to-external-users-in-office-365%3C%2FA%3E)%2C%20Is%20it%20possible%20to%20grant%20access%20to%20external%20users%20like%20earlier%3F%3C%2FSPAN%3E%3C%2FP%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3CP%3E%3CSPAN%3EEarlier%2C%20we%20have%20given%20Forms%20Membership%20with%20Contribute%20role%20to%20a%20SharePoint%26nbsp%3Blist%2C%20which%20helped%20external%20users%20to%20add%20items%20to%20the%20list.%20With%20this%20change%2C%20the%20external%20users%20are%20not%20able%20to%20access%20the%20list%20anymore.%3C%2FSPAN%3E%3C%2FP%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3CP%3E%3CSPAN%3ESnippet%3C%2FSPAN%3E%3C%2FP%3E%3CPRE%3E%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%26lt%3Bpnp%3ASecurity%26gt%3B%0A%20%20%20%26lt%3Bpnp%3ABreakRoleInheritance%26nbsp%3BCopyRoleAssignments%3D%22false%22%26nbsp%3BClearSubscopes%3D%22false%22%26gt%3B%0A%20%20%20%20%26lt%3Bpnp%3ARoleAssignment%26nbsp%3BPrincipal%3D%22c%3A0!.s%7Cforms%253amembership%22%26nbsp%3BRoleDefinition%3D%22Contribute%22%26nbsp%3B%2F%26gt%3B%0A%20%20%20%26lt%3B%2Fpnp%3ABreakRoleInheritance%26gt%3B%0A%20%20%26lt%3B%2Fpnp%3ASecurity%26gt%3B%3C%2FPRE%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3C%2FLINGO-BODY%3E%3CLINGO-LABS%20id%3D%22lingo-labs-180310%22%20slang%3D%22en-US%22%3E%3CLINGO-LABEL%3EO365%3C%2FLINGO-LABEL%3E%3C%2FLINGO-LABS%3E%3CLINGO-SUB%20id%3D%22lingo-sub-181964%22%20slang%3D%22en-US%22%3ERe%3A%20How%20to%20Grant%20Everyone%2FAll%20Authenticated%20claims%20to%20external%20users%20in%20O365%3F%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-181964%22%20slang%3D%22en-US%22%3E%3CP%3EI%20learned%20that%20the%20Administrator%20can%20change%20the%20behavior%20of%20these%20groups%20after%20the%20Microsoft%20had%20made%20the%20change%20on%20the%20external%20user%20access.%3C%2FP%3E%3CP%3EThe%20following%20link%20will%20be%20helpful.%3C%2FP%3E%3CP%3E%3CA%20href%3D%22https%3A%2F%2Fnigelbrowne.com%2Fbig-changes-are-coming-to-external-user-in-office365%2F%22%20target%3D%22_blank%22%20rel%3D%22nofollow%20noopener%20noreferrer%20noopener%20noreferrer%22%3Ehttps%3A%2F%2Fnigelbrowne.com%2Fbig-changes-are-coming-to-external-user-in-office365%2F%3C%2FA%3E%3C%2FP%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3CP%3EOne%20more%20observation%20is%20that%20-%20The%20change%20might%20not%20reflect%20immediately.%20It%20took%204%20hours%20in%20our%20case%20after%20which%20it%20is%20working%20as%20expected.%3C%2FP%3E%3C%2FLINGO-BODY%3E
Highlighted
Contributor

Hi,

 

From March 23rd, after Microsoft updating the behavior and governance of access by external users in Office 365(https://support.microsoft.com/en-hk/help/4089534/how-to-grant-the-everyone-claim-to-external-users-i...), Is it possible to grant access to external users like earlier?

 

Earlier, we have given Forms Membership with Contribute role to a SharePoint list, which helped external users to add items to the list. With this change, the external users are not able to access the list anymore.

 

Snippet

                <pnp:Security>
			<pnp:BreakRoleInheritance CopyRoleAssignments="false" ClearSubscopes="false">
				<pnp:RoleAssignment Principal="c:0!.s|forms%3amembership" RoleDefinition="Contribute" />
			</pnp:BreakRoleInheritance>
		</pnp:Security>

 

1 Reply
Highlighted
Solution

I learned that the Administrator can change the behavior of these groups after the Microsoft had made the change on the external user access.

The following link will be helpful.

https://nigelbrowne.com/big-changes-are-coming-to-external-user-in-office365/

 

One more observation is that - The change might not reflect immediately. It took 4 hours in our case after which it is working as expected.