By Design or not? Access request doesn't work for external user sharing

Brass Contributor

Hi all

 

New to SharePoint and I have setup access request settings as shown in the photo below. This seems to have the functionality that the admin gets an email to approve an internal user requesting to share a file with another internal user. But it doesn't work when sharing with an external user. Instead with these settings - when an internal user tries to share a file with an external user (that doesn't already exist) - SharePoint gives a message on the sharing screen to say "Your organization's policies don't allow you to share with these users. Please contact your IT department for help." and the internal user isn't even allowed to attempt to share the file externally.

 

However when you go an tick all the boxes - internal users can share internally and externally without any access request/approval required.

 

Any ideas if (not sending an access request for external sharing) is by design or not? I would have thought that access requests should be sent for internal and external sharing requests when the boxes are unticked as in photo - but seems not to be the case.

 

accessrequest.JPG

3 Replies
Out of curiosity: is it external sharing enabled at both the tenant and site collection level?

I agree with Juan, I would start with the Sharing settings.

In the O365 Admin Center under Settings - Services and add-ins you will find a 'Sites' section that has the following options.

Sharing1.PNG

Then, in the SharePoint Admin center, every site has a Sharing option.

Sharing2.PNG

This is usually be set to 'Don't allow sharing outside your organisation' by default - see screenshot below. You will see the third option refers to external users who accept sharing invitations and sign in as authenticated users. We would normally have this option selected for sites where users want to share externally with new (external) users.

Sharing3.PNG

In the SharePoint Admin centre you will also find a 'Sharing' section that also connects in with the above settings.

Sharing4.PNG
In the 'Site Settings' for each individual site,  you will then see, under 'Users and Permissions' - 'Site Permissions', the option you show 'Access Request Settings'. Our default settings are shown below.

Sharing5.PNG

All these settings connect with each other so it's useful to start at the top.

 

 

I'm struggling with a similar issue. I think I allowed everything but external users still get an error while trying to open a document instead of the Access Request form. The error roughly translates to <user> is not in the <sharepoint URL> directory.

Internal users are correctly getting the access request form.

 

I've put Allow anonymous external sharing and Allow access request in:

  • Admin Center -> Sites -> Allow tenant site
  • Admin Center -> Sites -> Allow site collection
  • Admin Center -> Sharepoint -> sharing -> Allow
  • Admin Center -> Sharepoint -> access control -> Allow
  • Admin Center -> Sharepoint -> site collection -> Allow
  • Sharepoint root permission settings -> Allow
  • Sharepoint site collection settings -> Allow
  • Sharepoint site settings -> Allow
  • Sharepoint library settings -> Allow

What am i missing? Thanks