Skip to content

Commit 00ee59a

Browse files
authored
Update 9-secure-access-teams-sharepoint.md
1 parent 74e7818 commit 00ee59a

File tree

1 file changed

+10
-14
lines changed

1 file changed

+10
-14
lines changed

articles/active-directory/fundamentals/9-secure-access-teams-sharepoint.md

Lines changed: 10 additions & 14 deletions
Original file line numberDiff line numberDiff line change
@@ -114,25 +114,21 @@ Learn more:
114114
115115
### Sharing policies in SharePoint and OneDrive
116116

117-
External Sharing can be set for both SharePoint and OneDrive. OneDrive restrictions can't be more permissive than the SharePoint settings.
117+
In the Azure AD admin center, you can use the External Sharing settings for SharePoint and OneDrive to help configure sharing policies. OneDrive restrictions can't be more permissive than SharePoint settings.
118118

119-
https://learn.microsoft.com/en-us/sharepoint/external-sharing-overview
119+
Learn more: [External sharing overview](https://learn.microsoft.com/en-us/sharepoint/external-sharing-overview)
120120

121-
![Screenshot of external sharing settings in SharePoint and OneDrive](media/secure-external-access/9-sharepoint-settings.png)
121+
![Screenshot of external sharing settings for SharePoint and OneDrive](media/secure-external-access/9-sharepoint-settings.png)
122122

123-
SharePoint integration with Azure AD B2B changes how controls interact with accounts.
123+
#### External sharing settings recommendations
124124

125-
* **Anyone**. Not recommended
125+
Use the guidance in this section when configuring external sharing.
126126

127-
* Regardless of integration status, enabling Anyone links means no Azure policies will be applied when this type of link is used.
128-
129-
* In a scenario of governed collaboration, don't enable this functionality.
130-
> [!NOTE]
131-
> You may find a scenario where you need to enable this setting for a specific site, in which case you would enable it here, and set the greater restriction on individual sites.
132-
133-
* **New and existing guests**. Recommended if you have integration enabled.
134-
135-
* **With Azure AD B2B integration** enabled, new and existing guests will have an Azure AD B2B guest account that can be managed with Azure AD policies.
127+
* **Anyone** - Not recommended. If enabled, regardless of integration status, no Azure policies are applied for this link type.
128+
* Don't enable this functionality for governed collaboration
129+
* Use it for restrictions on individual sites
130+
* **New and existing guests** - Recommended if integration is enabled.
131+
* With Azure AD B2B integration enabled, new and existing guests will have an Azure AD B2B guest account that can be managed with Azure AD policies.
136132

137133
* **Without Azure AD B2B integration** enabled, new guests will not have an Azure AD B2B account created, and they cannot be managed from Azure AD. Whether existing guests have an Azure AD B2B account depends on how the guest was created.
138134

0 commit comments

Comments
 (0)