May 15 2019
- last edited on
Jan 14 2022
I was, a while ago, told by an MVP that the "correct" way for granting External Consultants access to O365 - was to create them as 'Guest users' (and using their private/corporate email) and then assign them the appropriate 'Directory role' like the SharePoint Administrator role - however, doing this, the Consultant - gets into AAD - but when trying to access https://tenant-admin.sharepoint.com he's getting no access - and the message this site isn't externally shared.
Can someone confirm that this is the "right way" to grant Consultants access - and what am I missing in order giving access?
May 15 2019 12:58 PM
May 15 2019 10:31 PMSolution
I'm with Juan here. While you can technically add admin roles to guest users or even create mailboxes for them, I've never seen a statement from Microsoft that this is supported. In fact, the only place I've seen Guest admin access work is the (old) Office 365 Admin Center.
Nov 04 2020 02:09 AM
@Taen keren I know, this thread is already old. We are currently struggling with the same topic. Did you find a way to add a Guest to Global Admin (or SP Admin) in order to use the Sharepoint admin center?
I had to change member type via powershell from Guest to Member. This workaround does the job, means the user can access the admin center. Nevertheless, it is an ugly solution. In addition, we do have another problem when accessing further admin centers. The invited admin always jumps into its own Tenant and we didn't find a way to change this behavior... so far.
Dec 22 2020 07:10 AM
Yes, this solution only works to get proper permissions but... It looks to me as if the only multi tenant capable console is Azure Portal. We had to create a dedicated Admin for our partner. Very ugly solution but currently the only way to get what we want. Microsoft has to provide multi tenant support for all the consoles.
Jan 12 2022 03:44 PM
Jan 30 2022 12:26 AM