You signed in with another tab or window. Reload to refresh your session.You signed out in another tab or window. Reload to refresh your session.You switched accounts on another tab or window. Reload to refresh your session.Dismiss alert
Copy file name to clipboardExpand all lines: articles/active-directory/fundamentals/9-secure-access-teams-sharepoint.md
+10-14Lines changed: 10 additions & 14 deletions
Display the source diff
Display the rich diff
Original file line number
Diff line number
Diff line change
@@ -114,25 +114,21 @@ Learn more:
114
114
115
115
### Sharing policies in SharePoint and OneDrive
116
116
117
-
External Sharing can be set for both SharePoint and OneDrive. OneDrive restrictions can't be more permissive than the SharePoint settings.
117
+
In the Azure AD admin center, you can use the External Sharing settings for SharePoint and OneDrive to help configure sharing policies. OneDrive restrictions can't be more permissive than SharePoint settings.

121
+

122
122
123
-
SharePoint integration with Azure AD B2B changes how controls interact with accounts.
123
+
#### External sharing settings recommendations
124
124
125
-
***Anyone**. Not recommended
125
+
Use the guidance in this section when configuring external sharing.
126
126
127
-
* Regardless of integration status, enabling Anyone links means no Azure policies will be applied when this type of link is used.
128
-
129
-
* In a scenario of governed collaboration, don't enable this functionality.
130
-
> [!NOTE]
131
-
> You may find a scenario where you need to enable this setting for a specific site, in which case you would enable it here, and set the greater restriction on individual sites.
132
-
133
-
***New and existing guests**. Recommended if you have integration enabled.
134
-
135
-
***With Azure AD B2B integration** enabled, new and existing guests will have an Azure AD B2B guest account that can be managed with Azure AD policies.
127
+
***Anyone** - Not recommended. If enabled, regardless of integration status, no Azure policies are applied for this link type.
128
+
* Don't enable this functionality for governed collaboration
129
+
* Use it for restrictions on individual sites
130
+
***New and existing guests** - Recommended if integration is enabled.
131
+
* With Azure AD B2B integration enabled, new and existing guests will have an Azure AD B2B guest account that can be managed with Azure AD policies.
136
132
137
133
***Without Azure AD B2B integration** enabled, new guests will not have an Azure AD B2B account created, and they cannot be managed from Azure AD. Whether existing guests have an Azure AD B2B account depends on how the guest was created.
0 commit comments