External Sharing - Restricting a Site Collection by domain issue when inviting users

%3CLINGO-SUB%20id%3D%22lingo-sub-922273%22%20slang%3D%22en-US%22%3EExternal%20Sharing%20-%20Restricting%20a%20Site%20Collection%20by%20domain%20issue%20when%20inviting%20users%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-922273%22%20slang%3D%22en-US%22%3E%3CP%3EIf%20I%20restrict%20external%20sharing%20of%20site%20A%20to%20Domain%20A%20and%20invite%20user%20from%20Domain%20B%20the%20user%20is%20invited%20and%20receives%20an%20email%20message%20if%20they%20exist%20as%20a%20user%20in%20my%20tenant%20already.%20Following%20the%20sharing%20request%20link%20tells%20the%20user%20they%20don't%20have%20access%20and%20they%20can%20request%20access%20if%20the%20access%20requests%20are%20on.%20Approving%20the%20access%20request%20does%20nothing.%26nbsp%3B%3C%2FP%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3CP%3EI%20am%20thinking%20I%20would%20classify%20this%20as%26nbsp%3B%20bug.%26nbsp%3B%20Would%20you%20expect%20this%20to%20happen%3F%20I%20would%20expect%20the%20usual%20message%20%22%3CSPAN%3EYour%20organization's%20policies%20don't%20allow%20you%20to%20share%20with%20these%20users.%20Go%20to%20External%20Sharing%20in%20the%20Office%20365%20admin%20center%20to%20enable%20it.%3C%2FSPAN%3E%22%26nbsp%3B%3C%2FP%3E%3C%2FLINGO-BODY%3E%3CLINGO-LABS%20id%3D%22lingo-labs-922273%22%20slang%3D%22en-US%22%3E%3CLINGO-LABEL%3EPermissions%3C%2FLINGO-LABEL%3E%3CLINGO-LABEL%3ESharePoint%20Online%3C%2FLINGO-LABEL%3E%3CLINGO-LABEL%3ESites%3C%2FLINGO-LABEL%3E%3C%2FLINGO-LABS%3E%3CLINGO-SUB%20id%3D%22lingo-sub-922563%22%20slang%3D%22en-US%22%3ERe%3A%20External%20Sharing%20-%20Restricting%20a%20Site%20Collection%20by%20domain%20issue%20when%20inviting%20users%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-922563%22%20slang%3D%22en-US%22%3E%3CP%3EYeah%20if%20the%20user%20already%20exists%20in%20the%20tenant%20I%20would%20expect%20the%20feature%20to%20check%20for%20that%20before%20sending%20an%20email%20invitation.%20Sound%20like%20a%20scenario%20they%20didn't%20code%20for%2Ftest%2C%20we%20get%20a%20lot%20of%20these%20lately...%3C%2FP%3E%3C%2FLINGO-BODY%3E%3CLINGO-SUB%20id%3D%22lingo-sub-959712%22%20slang%3D%22en-US%22%3ERe%3A%20External%20Sharing%20-%20Restricting%20a%20Site%20Collection%20by%20domain%20issue%20when%20inviting%20users%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-959712%22%20slang%3D%22en-US%22%3E%3CP%3EHi%26nbsp%3B%3CA%20href%3D%22https%3A%2F%2Ftechcommunity.microsoft.com%2Ft5%2Fuser%2Fviewprofilepage%2Fuser-id%2F214649%22%20target%3D%22_blank%22%3E%40Andrew%20Hodges%3C%2FA%3E%2C%3C%2FP%3E%0A%3CP%3E%26nbsp%3B%3C%2FP%3E%0A%3CP%3EThanks%20for%20flagging%20this!%20Can%20you%20share%20(pun%20not%20intended%20%3A)%3C%2Fimg%3E%20)%20which%20Share%20UI%20you%20used%20to%20add%20the%20guest%20user%20from%20Domain%20B%20to%20the%20site%3F%20Thanks!%3C%2FP%3E%0A%3CP%3E%3CBR%20%2F%3EStephen%20Rice%3C%2FP%3E%0A%3CP%3ESenior%20Program%20Manager%2C%20OneDrive%3C%2FP%3E%3C%2FLINGO-BODY%3E%3CLINGO-SUB%20id%3D%22lingo-sub-962237%22%20slang%3D%22en-US%22%3ERe%3A%20External%20Sharing%20-%20Restricting%20a%20Site%20Collection%20by%20domain%20issue%20when%20inviting%20users%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-962237%22%20slang%3D%22en-US%22%3E%3CP%3EHi%20%3CA%20href%3D%22https%3A%2F%2Ftechcommunity.microsoft.com%2Ft5%2Fuser%2Fviewprofilepage%2Fuser-id%2F181%22%20target%3D%22_blank%22%3E%40Stephen%20Rice%3C%2FA%3E%20%2C%3C%2FP%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3CP%3EIts%20all%20of%20them%20from%20some%20quick%20tests%20I%20just%20did.%3C%2FP%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3CP%3EThanks%3C%2FP%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3CP%3EAndy%3C%2FP%3E%3C%2FLINGO-BODY%3E%3CLINGO-SUB%20id%3D%22lingo-sub-966143%22%20slang%3D%22en-US%22%3ERe%3A%20External%20Sharing%20-%20Restricting%20a%20Site%20Collection%20by%20domain%20issue%20when%20inviting%20users%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-966143%22%20slang%3D%22en-US%22%3E%3CP%3EHi%20%3CA%20href%3D%22https%3A%2F%2Ftechcommunity.microsoft.com%2Ft5%2Fuser%2Fviewprofilepage%2Fuser-id%2F214649%22%20target%3D%22_blank%22%3E%40Andrew%20Hodges%3C%2FA%3E%2C%3C%2FP%3E%0A%3CP%3E%26nbsp%3B%3C%2FP%3E%0A%3CP%3EWhat%20this%20from%20the%20modern%20Share%20UI%20or%20were%20you%20using%20classic%3F%20Thanks!%3C%2FP%3E%0A%3CP%3E%3CBR%20%2F%3EStephen%20Rice%3C%2FP%3E%0A%3CP%3ESenior%20Program%20Manager%2C%20OneDrive%3C%2FP%3E%3C%2FLINGO-BODY%3E%3CLINGO-SUB%20id%3D%22lingo-sub-968036%22%20slang%3D%22en-US%22%3ERe%3A%20External%20Sharing%20-%20Restricting%20a%20Site%20Collection%20by%20domain%20issue%20when%20inviting%20users%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-968036%22%20slang%3D%22en-US%22%3E%3CP%3EHi%20%3CA%20href%3D%22https%3A%2F%2Ftechcommunity.microsoft.com%2Ft5%2Fuser%2Fviewprofilepage%2Fuser-id%2F181%22%20target%3D%22_blank%22%3E%40Stephen%20Rice%3C%2FA%3E%20%2C%3C%2FP%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3CP%3EBoth%2C%20I%20checked%20from%20the%20Share%20Site%20button%20and%20the%20Share%20file%20button%20in%20Modern%20pages%20and%20also%20in%20the%20back%20end%20permission%20screens%2C%20adding%20the%20user%20to%20site%20permissions.%26nbsp%3B%3C%2FP%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3CP%3EThanks%3C%2FP%3E%3CP%3E%3CBR%20%2F%3EAndy%3C%2FP%3E%3C%2FLINGO-BODY%3E%3CLINGO-SUB%20id%3D%22lingo-sub-972191%22%20slang%3D%22en-US%22%3ERe%3A%20External%20Sharing%20-%20Restricting%20a%20Site%20Collection%20by%20domain%20issue%20when%20inviting%20users%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-972191%22%20slang%3D%22en-US%22%3E%3CP%3EHi%20%3CA%20href%3D%22https%3A%2F%2Ftechcommunity.microsoft.com%2Ft5%2Fuser%2Fviewprofilepage%2Fuser-id%2F214649%22%20target%3D%22_blank%22%3E%40Andrew%20Hodges%3C%2FA%3E%2C%3C%2FP%3E%0A%3CP%3E%26nbsp%3B%3C%2FP%3E%0A%3CP%3EAre%20you%20still%20seeing%20this%20on%20your%20end%3F%20I%20just%20tried%20to%20reproduce%20it%20from%20my%20end%20and%20I%20was%20seeing%20the%20expected%20error%20message%20(regardless%20of%20whether%20the%20Allow%20list%20was%20set%20at%20the%20tenant%20level%20or%20at%20the%20site%20level).%20Thanks!%3C%2FP%3E%0A%3CP%3E%26nbsp%3B%3C%2FP%3E%0A%3CP%3EStephen%20Rice%3C%2FP%3E%0A%3CP%3EOneDrive%20Senior%20Program%20Manager%3C%2FP%3E%3C%2FLINGO-BODY%3E
Valued Contributor

If I restrict external sharing of site A to Domain A and invite user from Domain B the user is invited and receives an email message if they exist as a user in my tenant already. Following the sharing request link tells the user they don't have access and they can request access if the access requests are on. Approving the access request does nothing. 

 

I am thinking I would classify this as  bug.  Would you expect this to happen? I would expect the usual message "Your organization's policies don't allow you to share with these users. Go to External Sharing in the Office 365 admin center to enable it.

6 Replies

Yeah if the user already exists in the tenant I would expect the feature to check for that before sending an email invitation. Sound like a scenario they didn't code for/test, we get a lot of these lately...

Hi @Andrew Hodges,

 

Thanks for flagging this! Can you share (pun not intended :) ) which Share UI you used to add the guest user from Domain B to the site? Thanks!


Stephen Rice

Senior Program Manager, OneDrive

Hi @Stephen Rice ,

 

Its all of them from some quick tests I just did.

 

Thanks

 

Andy

Hi @Andrew Hodges,

 

What this from the modern Share UI or were you using classic? Thanks!


Stephen Rice

Senior Program Manager, OneDrive

Hi @Stephen Rice ,

 

Both, I checked from the Share Site button and the Share file button in Modern pages and also in the back end permission screens, adding the user to site permissions. 

 

Thanks


Andy

Hi @Andrew Hodges,

 

Are you still seeing this on your end? I just tried to reproduce it from my end and I was seeing the expected error message (regardless of whether the Allow list was set at the tenant level or at the site level). Thanks!

 

Stephen Rice

OneDrive Senior Program Manager