mixing domain allowlist and any domain external sharing

%3CLINGO-SUB%20id%3D%22lingo-sub-356890%22%20slang%3D%22en-US%22%3Emixing%20domain%20allowlist%20and%20any%20domain%20external%20sharing%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-356890%22%20slang%3D%22en-US%22%3E%3CP%3EHi%20there%2C%3C%2FP%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3CP%3EIs%20it%20possible%20or%20how%20to%20configure%20the%20following%20scenario%20in%20od4b%3A%3C%2FP%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3CP%3EAll%20users%20are%20allowed%20to%20share%20externally%20to%20some%20specific%20allowlist%20domains%3C%2FP%3E%3CP%3ESome%20users%20in%20a%20specific%20Security%20Group%20are%20allowed%20to%20share%20to%20any%20domain%3C%2FP%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3CP%3EThe%20scenario%20is%20that%20we%20have%20partner%20organizations%20that%20we%20trust%20and%20no%20need%20for%20special%20approval%20or%20auditing%2C%20but%20for%20other%20domains%20we%20need%20to%20have%20stricter%20controls%20for%20auditing%20purposes.%3C%2FP%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3CP%3EI%20took%20a%20look%20at%20the%20GUI%20and%20the%20options%20there%20don't%20allow%20for%20such%20granular%20controls%2C%20and%20I%20can't%20seem%20to%20find%20the%20correct%20powershell%20combination%20to%20modify%20these%20permissions%20on%20a%20per%20site%20level.%3C%2FP%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3CP%3EAny%20help%20or%20just%20letting%20me%20know%20if%20its%20possible%20and%20some%20pointers%20in%20the%20right%20direction%20would%20be%20fantastic%26nbsp%3B%3C%2FP%3E%3C%2FLINGO-BODY%3E%3CLINGO-LABS%20id%3D%22lingo-labs-356890%22%20slang%3D%22en-US%22%3E%3CLINGO-LABEL%3EAdmin%3C%2FLINGO-LABEL%3E%3CLINGO-LABEL%3EOneDrive%20for%20Business%3C%2FLINGO-LABEL%3E%3C%2FLINGO-LABS%3E%3CLINGO-SUB%20id%3D%22lingo-sub-357098%22%20slang%3D%22en-US%22%3ERe%3A%20mixing%20domain%20allowlist%20and%20any%20domain%20external%20sharing%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-357098%22%20slang%3D%22en-US%22%3E%3CP%3EWell%20you%20can%20configure%20the%26nbsp%3Bexternal%20sharing%20settings%26nbsp%3Bon%20per-SC%20basis%2C%20I%20imagine%20those%20partner%20users%20only%20have%20access%20to%20specific%20site%20collections%20anyway.%20But%20to%20answer%20the%20question%2C%20no%2C%20I'm%20not%20aware%20of%20any%20method%20to%20combine%20both.%3C%2FP%3E%3C%2FLINGO-BODY%3E
New Contributor

Hi there,

 

Is it possible or how to configure the following scenario in od4b:

 

All users are allowed to share externally to some specific allowlist domains

Some users in a specific Security Group are allowed to share to any domain

 

The scenario is that we have partner organizations that we trust and no need for special approval or auditing, but for other domains we need to have stricter controls for auditing purposes.

 

I took a look at the GUI and the options there don't allow for such granular controls, and I can't seem to find the correct powershell combination to modify these permissions on a per site level.

 

Any help or just letting me know if its possible and some pointers in the right direction would be fantastic 

1 Reply
Highlighted

Well you can configure the external sharing settings on per-SC basis, I imagine those partner users only have access to specific site collections anyway. But to answer the question, no, I'm not aware of any method to combine both.