Manage external users for "SharePoint" & "Office 365" groups when creating MS Teams

%3CLINGO-SUB%20id%3D%22lingo-sub-929241%22%20slang%3D%22en-US%22%3EManage%20external%20users%20for%20%22SharePoint%22%20%26amp%3B%20%22Office%20365%22%20groups%20when%20creating%20MS%20Teams%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-929241%22%20slang%3D%22en-US%22%3E%3CP%3EI%20have%20create%20a%20new%20MS%20Teams%2C%20and%20i%20set%20it%20as%20private%2C%20as%20follow%3A-%3C%2FP%3E%3CP%3E%3CSPAN%20class%3D%22lia-inline-image-display-wrapper%20lia-image-align-inline%22%20style%3D%22width%3A%20999px%3B%22%3E%3CIMG%20src%3D%22https%3A%2F%2Fgxcuf89792.i.lithium.com%2Ft5%2Fimage%2Fserverpage%2Fimage-id%2F139894i2637ECD639365659%2Fimage-size%2Flarge%3Fv%3D1.0%26amp%3Bpx%3D999%22%20alt%3D%22teams.png%22%20title%3D%22teams.png%22%20%2F%3E%3C%2FSPAN%3E%3C%2FP%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3CP%3Ewhich%20have%20created%20a%20new%20sharepoint%20site%2C%20which%20have%20the%20following%20external%20sharing%20settings%3A-%3C%2FP%3E%3CP%3E%3CSPAN%20class%3D%22lia-inline-image-display-wrapper%20lia-image-align-inline%22%20style%3D%22width%3A%20374px%3B%22%3E%3CIMG%20src%3D%22https%3A%2F%2Fgxcuf89792.i.lithium.com%2Ft5%2Fimage%2Fserverpage%2Fimage-id%2F139904i2EA11254CEF982FB%2Fimage-size%2Flarge%3Fv%3D1.0%26amp%3Bpx%3D999%22%20alt%3D%22sharepoint%20sharing7.png%22%20title%3D%22sharepoint%20sharing7.png%22%20%2F%3E%3C%2FSPAN%3E%3C%2FP%3E%3CP%3Eand%20also%20have%20created%20a%20new%20Office%20365%20group%2C%20which%20does%20not%20allow%20external%20sharing%20as%20follow%3A-%3C%2FP%3E%3CP%3E%3CSPAN%20class%3D%22lia-inline-image-display-wrapper%20lia-image-align-inline%22%20style%3D%22width%3A%20910px%3B%22%3E%3CIMG%20src%3D%22https%3A%2F%2Fgxcuf89792.i.lithium.com%2Ft5%2Fimage%2Fserverpage%2Fimage-id%2F139922i1718A7A01514CC02%2Fimage-size%2Flarge%3Fv%3D1.0%26amp%3Bpx%3D999%22%20alt%3D%22groyp.png%22%20title%3D%22groyp.png%22%20%2F%3E%3C%2FSPAN%3E%3C%2FP%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3CP%3Enow%20i%20have%20the%20following%20questions%3A-%3C%2FP%3E%3CP%3E1)%20i%20have%20shared%20the%20sharepoint%20site%20with%20an%20external%20user%2C%20and%20the%20user%20can%20access%20the%20sharepoint%20site%20and%20upload%20documents.%20but%20i%20am%20not%20sure%20what%20the%20user%20can%20not%20do%2C%20since%20he%20was%20not%20added%20inside%20the%20Office%20365%20group%3F%3C%2FP%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3CP%3E2)%20as%20i%20know%20MS%20teams%20allow%20chatting%20through%20its%20desktop%20application%2C%20but%20seems%20the%20MS%20Teams%20itself%20does%20not%20have%20an%20external%20sharing%20settings..%20so%20if%20i%20share%20the%20sharepoint%20site%20with%20an%20external%20user%2C%20will%20this%20user%20be%20able%20to%20chat%20with%20other%20members%20inside%20the%20MS%20Teams%3F%20the%20confusion%20is%20that%20MS%20Teams%20itself%20does%20not%20have%20an%20external%20sharing%20setting%20%2B%20does%20not%20have%20a%20module%20to%20add%20users%20to%20it...%3C%2FP%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3CP%3ECan%20anyone%20advice%20on%20my%20above%202%20questions%3F%3C%2FP%3E%3CP%3EThanks%3C%2FP%3E%3C%2FLINGO-BODY%3E%3CLINGO-LABS%20id%3D%22lingo-labs-929241%22%20slang%3D%22en-US%22%3E%3CLINGO-LABEL%3EOffice%20365%20Groups%3C%2FLINGO-LABEL%3E%3CLINGO-LABEL%3ESharePoint%20Online%3C%2FLINGO-LABEL%3E%3CLINGO-LABEL%3ETeams%3C%2FLINGO-LABEL%3E%3C%2FLINGO-LABS%3E%3CLINGO-SUB%20id%3D%22lingo-sub-931954%22%20slang%3D%22en-US%22%3ERe%3A%20Manage%20external%20users%20for%20%22SharePoint%22%20%26amp%3B%20%22Office%20365%22%20groups%20when%20creati%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-931954%22%20slang%3D%22en-US%22%3ETeams%20has%20guest%20access%20which%20gives%20rights%20to%20everything%20that%20is%20group%20connect%20including%20the%20SharePoint%20site%20and%20files.%20Sharing%20just%20the%20SharePoint%20site%20if%20using%20the%20%E2%80%9Cjust%20the%20site%E2%80%9D%20option%20only%20gives%20access%20to%20SharePoint%20only.%20%3CBR%20%2F%3E%3CBR%20%2F%3EHere%20is%20the%20checklist%20article%20for%20setting%20up%20Teams%20guest%20access.%20Once%20configured%20you%20can%20just%20add%20a%20guest%20just%20like%20any%20other%20user%20to%20Teams%20using%20their%20email%20address.%20%3CBR%20%2F%3E%3CA%20href%3D%22https%3A%2F%2Fdocs.microsoft.com%2Fen-us%2Fmicrosoftteams%2Fguest-access-checklist%23-step-3-enable-guest-access-at-the-tenant-level%22%20target%3D%22_blank%22%20rel%3D%22noopener%20noreferrer%22%3Ehttps%3A%2F%2Fdocs.microsoft.com%2Fen-us%2Fmicrosoftteams%2Fguest-access-checklist%23-step-3-enable-guest-access-at-the-tenant-level%3C%2FA%3E%3C%2FLINGO-BODY%3E%3CLINGO-SUB%20id%3D%22lingo-sub-949660%22%20slang%3D%22en-US%22%3ERe%3A%20Manage%20external%20users%20for%20%22SharePoint%22%20%26amp%3B%20%22Office%20365%22%20groups%20when%20creati%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-949660%22%20slang%3D%22en-US%22%3E%3CP%3E%3CA%20href%3D%22https%3A%2F%2Ftechcommunity.microsoft.com%2Ft5%2Fuser%2Fviewprofilepage%2Fuser-id%2F869%22%20target%3D%22_blank%22%3E%40Chris%20Webb%3C%2FA%3EOk%20thanks%20for%20the%20reply.%20so%20this%20means%20that%20i%20can%20only%20enable%20the%20guest%20access%20for%20MS%20Teams%20on%20the%20tenant%20level%3F%20and%20i%20can%20not%20do%20this%20per%20MS%20Team%2C%20for%20example%20to%20allow%20a%20MS%20Team%20to%20be%20shared%20with%20external%20user%20while%20prevent%20others%20(similar%20to%20how%20sharepoint%20external%20sharing%20works%20on%20per%20site%20basis)%3F%3C%2FP%3E%3C%2FLINGO-BODY%3E%3CLINGO-SUB%20id%3D%22lingo-sub-951158%22%20slang%3D%22en-US%22%3ERe%3A%20Manage%20external%20users%20for%20%22SharePoint%22%20%26amp%3B%20%22Office%20365%22%20groups%20when%20creati%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-951158%22%20slang%3D%22en-US%22%3EReplied%20to%20your%20other%20post%20but%20managing%20per%20team%20guest%20access%20is%20covered%20here.%20%3CA%20href%3D%22https%3A%2F%2Fdocs.microsoft.com%2Fen-us%2Fmicrosoftteams%2Fguest-access-powershell%22%20target%3D%22_blank%22%20rel%3D%22noopener%20noreferrer%22%3Ehttps%3A%2F%2Fdocs.microsoft.com%2Fen-us%2Fmicrosoftteams%2Fguest-access-powershell%3C%2FA%3E%3C%2FLINGO-BODY%3E%3CLINGO-SUB%20id%3D%22lingo-sub-936400%22%20slang%3D%22en-US%22%3ERe%3A%20Manage%20external%20users%20for%20%22SharePoint%22%20%26amp%3B%20%22Office%20365%22%20groups%20when%20creati%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-936400%22%20slang%3D%22en-US%22%3E%3CP%3EHi%3CA%20href%3D%22https%3A%2F%2Ftechcommunity.microsoft.com%2Ft5%2Fuser%2Fviewprofilepage%2Fuser-id%2F233354%22%20target%3D%22_blank%22%3E%40john%20john%3C%2FA%3E%20%2C%3C%2FP%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3CP%3E1)%20If%20you%20add%20the%20user%20into%20the%20SharePoint%20directly%20through%20the%20SharePoint%20permissions%20then%20they%20have%20access%26nbsp%3B%20to%20the%20SharePoint%20site%20and%20can%20do%20anything%20on%20the%20SharePoint%20site%20as%20per%20the%20permission%20level%20that%20you%20have%20given%20them.%26nbsp%3B%20They%20have%20no%20access%20to%20anything%20else%20in%20the%20Office%20365%20group%20or%20access%20to%20the%20Microsoft%20Team.%26nbsp%3B%20Any%20files%20that%20get%20added%20into%20the%20SharePoint%26nbsp%3B%20site%20via%20the%20Microsoft%20Team%20they%20will%20have%20access%20to.%3C%2FP%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3CP%3E2)%26nbsp%3B%20As%26nbsp%3B%3CA%20href%3D%22https%3A%2F%2Ftechcommunity.microsoft.com%2Ft5%2Fuser%2Fviewprofilepage%2Fuser-id%2F869%22%20target%3D%22_blank%22%3E%40Chris%20Webb%3C%2FA%3E%26nbsp%3B%20mentions%20you%20need%20to%20setup%20guest%20access%20in%20Microsoft%20Teams%2C%20doing%20that%20will%20enable%20you%20to%20add%20Guest%20Users%20to%20the%20Microsoft%20Team%20which%20in%20turn%20adds%20them%20into%20the%20SharePoint%20site.%26nbsp%3B%20The%20setting%20is%20in%20the%20Teams%20Admin%20centre%20under%20Organisational%20settings.%20%3CSPAN%3EExternal%20Sharing%2FGuest%20Access%20cannot%20be%20done%20the%20other%20way%20around%20to%20give%20access%20to%20the%20Microsoft%20Team%20(EDIT%3A%20Through%20the%20Admin%20centre%2C%20see%20below%20for%20PowerShell%20options).%3C%2FSPAN%3E%3C%2FP%3E%3CP%3EYou%20do%20not%20need%20to%20do%20anything%20further%20for%20guest%20users%20to%20get%20access%20to%20the%20SharePoint%20site%20unless%20you%20have%20restricted%20SharePoint%20access%20by%20external%20domain%20in%20which%20case%20you%20need%20to%20go%20and%20set%20that%20in%20SharePoint%20tenant%20settings%20and%20the%20SharePoint%20site%20itself.%3C%2FP%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3C%2FLINGO-BODY%3E
Valued Contributor

I have create a new MS Teams, and i set it as private, as follow:-

teams.png

 

which have created a new sharepoint site, which have the following external sharing settings:-

sharepoint sharing7.png

and also have created a new Office 365 group, which does not allow external sharing as follow:-

groyp.png

 

now i have the following questions:-

1) i have shared the sharepoint site with an external user, and the user can access the sharepoint site and upload documents. but i am not sure what the user can not do, since he was not added inside the Office 365 group?

 

2) as i know MS teams allow chatting through its desktop application, but seems the MS Teams itself does not have an external sharing settings.. so if i share the sharepoint site with an external user, will this user be able to chat with other members inside the MS Teams? the confusion is that MS Teams itself does not have an external sharing setting + does not have a module to add users to it...

 

Can anyone advice on my above 2 questions?

Thanks

4 Replies
Teams has guest access which gives rights to everything that is group connect including the SharePoint site and files. Sharing just the SharePoint site if using the “just the site” option only gives access to SharePoint only.

Here is the checklist article for setting up Teams guest access. Once configured you can just add a guest just like any other user to Teams using their email address.
https://docs.microsoft.com/en-us/microsoftteams/guest-access-checklist#-step-3-enable-guest-access-a...

Hi@john john ,

 

1) If you add the user into the SharePoint directly through the SharePoint permissions then they have access  to the SharePoint site and can do anything on the SharePoint site as per the permission level that you have given them.  They have no access to anything else in the Office 365 group or access to the Microsoft Team.  Any files that get added into the SharePoint  site via the Microsoft Team they will have access to.

 

2)  As @Chris Webb  mentions you need to setup guest access in Microsoft Teams, doing that will enable you to add Guest Users to the Microsoft Team which in turn adds them into the SharePoint site.  The setting is in the Teams Admin centre under Organisational settings. External Sharing/Guest Access cannot be done the other way around to give access to the Microsoft Team (EDIT: Through the Admin centre, see below for PowerShell options).

You do not need to do anything further for guest users to get access to the SharePoint site unless you have restricted SharePoint access by external domain in which case you need to go and set that in SharePoint tenant settings and the SharePoint site itself.

 

 

@Chris WebbOk thanks for the reply. so this means that i can only enable the guest access for MS Teams on the tenant level? and i can not do this per MS Team, for example to allow a MS Team to be shared with external user while prevent others (similar to how sharepoint external sharing works on per site basis)?

Replied to your other post but managing per team guest access is covered here. https://docs.microsoft.com/en-us/microsoftteams/guest-access-powershell