Define "Allow only users in specific security group to share externally" for sharepoint sites only

[john john]

As per my knowledge if we define that only users inside specific security group can share with external users, as follow:-

then this will be applied to SharePoint sites + onedrive personal sites. now inside our organization we want everyone to share files with external users inside their one-drives, while only allow users inside the above security group to share the sites with external users.. so is this possible? or the above settings will get applied to sharepoint and onedrive?

[#2]

@john john 

I just tested this, and with the setting applied it would not allow me to share externally from SharePoint or OneDrive from a user not in the security group.  As soon as I turned the setting off again, it allowed me to share once again.  So at first glance it sure looks like this is a settings that is either on or off across both SharePoint and OneDrive.

[#3]

Hi @john john,

This particular setting is only available at the organization level today and so is working as expected. The policies here will apply to content stored in OneDrive and in SharePoint. There is no way to configure separate lists of allowed users today. If you have any questions, feel free to let me know! Thanks!

Stephen Rice

Senior Program Manager, OneDrive

[#4]

@Stephen Rice
so as @PeterRising wrote "I just tested this, and with the setting applied it would not allow me to share externally from SharePoint or OneDrive from a user not in the security group. As soon as I turned the setting off again, it allowed me to share once again. So at first glance it sure looks like this is a settings that is either on or off across both SharePoint and OneDrive."

why this happens have seen this to? does it take time for the group to apply our is it some Token thats taking time?

regards
Tommy

[#5]

@Stephen Rice 

For me this settings does not work. But that might be because I do not know how to combine this option with the overall tenant sharing settings.

For OneDrive our setting is least permissive, we only allow sharing withing our organization.

I would now like for a few users (that are in the same sec.group) to be able to share outside the organisation. But even after enabling the option "Allow only users in specific security group to share externally" it does not work.

Does our global setting need to be changed, to most permissive? And only then will the option "Allow only users in specific security group to share externally" actually serve it's purpose by actually blocking the sharing option for anyone not included in the sec.group

regards

[#6]

Hi HenricStr,

That's correct. The overall tenant sharing settings must be enabled in order for ANY external sharing to occur. Once they are enabled, every other setting applies further restrictions (such as only allowing the external sharing by specific people). Hope that helps!

Stephen Rice
Senior Product Manager, OneDrive

[#7]

@Stephen Rice 

i have an issue with this setting.

as soon as i enable it, all external sharing is disallowed, even for users that are members of the specified group. If i disable the setting again, external sharing works.

what could be the issue here?

thanks in advance 

[#8]

Did you get this figured out?

Two things I figured out are that it has to be a 'Mail-Enabled Security Group' and not just a 'Security Group' and also.... these settings seem to take a WHILE to take effect. 20 minutes or more later, no changes seem to be in place.

It's hard to troubleshoot this altogether when the changes are not only ambiguous (Microsoft's documentation completely fails to explain how it works), but they take long periods of time for minor changes to take effect. This is completely impractical.

[#9]

@fbsPaul 

This is still an issue. Even as a member of specified group, it does not work. I had to disabled it. Even Switching it off and on again did not work 

[#10]

Hello everyone,

Did someone find a solution to this problem?

I used the mail enabled security groups BUT the users in that group still can't share files externally. 

Also note that if I untick the box: "Allow only users in specific security groups to share externally", people can share. I'd like to assume that this means that the problem comes from this setting alone and not from other tenant wide configurations.