You signed in with another tab or window. Reload to refresh your session.You signed out in another tab or window. Reload to refresh your session.You switched accounts on another tab or window. Reload to refresh your session.Dismiss alert
# Secure external access to Microsoft Teams, SharePoint, and OneDrive with Azure Active Directory
19
19
20
-
Use this article to determine and configure your organization's external collaboration using Microsoft Teams, OneDrive for Business, and SharePoint. A common challenge is balancing security and ease of collaboration for end users and external users. If an approved collaboration method is perceieved as restrictive and onerous, end user evade the approved method. End users might email unsecured content, or set up external processes and applications, such as a personal DropBox or OneDrive.
20
+
Use this article to determine and configure your organization's external collaboration using Microsoft Teams, OneDrive for Business, and SharePoint. A common challenge is balancing security and ease of collaboration for end users and external users. If an approved collaboration method is perceived as restrictive and onerous, end users evade the approved method. End users might email unsecured content, or set up external processes and applications, such as a personal DropBox or OneDrive.
21
21
22
22
## External Identities settings and Azure Active Directory
23
23
24
-
Sharing in Microsoft 365 is partially governed by the **Exernal Identities, External collaboration** settings in Azure Active Directory (Azure AD). If external sharing is disabled or restricted in Azure AD, it overrides sharing settings configured in Microsoft 365. An exception is if Azure AD B2B integration isn't enabled. You can configure SharePoint and OneDrive to support ad-hoc sharing via one-time password (OTP). The following screenshot shows the External Identities, External collaboration settings dialog.
24
+
Sharing in Microsoft 365 is partially governed by the **External Identities, External collaboration** settings in Azure Active Directory (Azure AD). If external sharing is disabled or restricted in Azure AD, it overrides sharing settings configured in Microsoft 365. An exception is if Azure AD B2B integration isn't enabled. You can configure SharePoint and OneDrive to support ad-hoc sharing via one-time password (OTP). The following screenshot shows the External Identities, External collaboration settings dialog.
25
25
26
26

27
27
@@ -54,7 +54,7 @@ Guest invite settings determine who invites guests and how guests are invited. T
54
54
* Revokes access as needed
55
55
56
56
* The IT team:
57
-
* After training is complete, grants the Guest Inviter role
57
+
* After training is complete, the IT team grants the Guest Inviter role
58
58
* To enable access reviews, assigns Azure AD P2 license to the Microsoft 365 group owner
59
59
* Creates a Microsoft 365 group access review
60
60
* Confirms access reviews occur
@@ -69,15 +69,15 @@ For the Collaboration restrictions option, the organization's business requireme
69
69
70
70
***Allow invitations to be sent to any domain** - any user can be invited
71
71
***Deny invitations to the specified domains** - any user outside those domains can be invited
72
-
***Allow invitations only to the specified domains** - any user outside those domains cannot be invited
72
+
***Allow invitations only to the specified domains** - any user outside those domains can't be invited
73
73
74
74
## External users and guest users in Teams
75
75
76
76
Teams differentiates between external users (outside your organization) and guest users (guest accounts). You can manage collaboration setting in the [Teams Admin portal](https://admin.teams.microsoft.com/company-wide-settings/external-communications) under Org-wide settings. Authorized account credentials are required to sign in to the Teams Admin portal.
77
77
78
78
***External Access** - Teams allows external access by default. The organization can communicate with all external domains
79
79
* Use External Access setting to restrict or allow domains
80
-
***Guest Access** - manage guest acess in Teams
80
+
***Guest Access** - manage guest access in Teams
81
81
82
82
Learn more: [Use guest access and external access to collaborate with people outside your organization](/microsoftteams/communicate-with-users-from-other-organizations).
83
83
@@ -132,7 +132,7 @@ Use the guidance in this section when configuring external sharing.
132
132
* Azure AD B2B integration not enabled: new guests don't have an Azure AD B2B account, and can't be managed from Azure AD
133
133
* Guests have an Azure AD B2B account, depending on how the guest was created
134
134
***Existing guests** - Recommended, if you don't have integration enabled
135
-
* With this enabled, users can share with other users in your directory
135
+
* With this option enabled, users can share with other users in your directory
136
136
***Only people in your organization** - Not recommended with external user collaboration
137
137
* Regardless of integration status, users can share with other users in your organization
138
138
***Limit external sharing by domain** - By default, SharePoint allows external access. Sharing is allowed with external domains.
@@ -146,14 +146,14 @@ Use the guidance in this section when configuring external sharing.
146
146
Access controls setting affect all users in your organization. Because you might not be able to control whether external users have compliant devices, the controls won't be addressed in this article.
147
147
148
148
***Idle session sign-out** - Recommended
149
-
* Use this option to warn and sign-out users on unmanaged devices, after a period of inactivity
149
+
* Use this option to warn and signout users on unmanaged devices, after a period of inactivity
150
150
* You can configure the period of inactivity and the warning
151
151
***Network location** - Set this control to allow access from IP addresses your organization owns.
152
152
* For external collaboration, set this control if your external partners access resources when in your network, or with your virtual private network (VPN).
153
153
154
154
### File and folder links
155
155
156
-
In the SharePoint admin center, you can set how file and folder links are shared. You can configure these setting for each site.
156
+
In the SharePoint admin center, you can set how file and folder links are shared. You can configure the setting for each site.
157
157
158
158

159
159
@@ -166,7 +166,7 @@ You can customize this setting for a per-site default.
166
166
167
167
### Anyone links
168
168
169
-
Enabling Anyone links is not recommended. If you enable it, set an expiration, and restrict users to view permissions. If you select View only permissions for files or folders, users can't change Anyone links to include edit privileges.
169
+
Enabling Anyone links isn't recommended. If you enable it, set an expiration, and restrict users to view permissions. If you select View only permissions for files or folders, users can't change Anyone links to include edit privileges.
0 commit comments