You signed in with another tab or window. Reload to refresh your session.You signed out in another tab or window. Reload to refresh your session.You switched accounts on another tab or window. Reload to refresh your session.Dismiss alert
# Add Azure Active Directory B2B collaboration users in the Azure portal
19
19
20
-
As a user who is assigned any of the limited administrator directory roles, you can use the Azure portal to invite B2B collaboration users. You can invite guest users to the directory, to a group, or to an application. After you invite a user through any of these methods, the invited user's account is added to Azure Active Directory (Azure AD), with a user type of *Guest*. The guest user must then redeem their invitation to access resources. An invitation of a user does not expire.
20
+
As a user who is assigned any of the limited administrator directory roles, you can use the Azure portal to invite B2B collaboration users. You can invite guest users to the directory, to a group, or to an application. After you invite a user through any of these methods, the invited user's account is added to Azure Active Directory (Azure AD), with a user type of *Guest*. The guest user must then redeem their invitation to access resources. An invitation of a user doesn't expire.
21
21
22
22
After you add a guest user to the directory, you can either send the guest user a direct link to a shared app, or the guest user can select the redemption URL in the invitation email. For more information about the redemption process, see [B2B collaboration invitation redemption](redemption-experience.md).
23
23
24
24
> [!IMPORTANT]
25
25
> You should follow the steps in [How-to: Add your organization's privacy info in Azure Active Directory](../fundamentals/active-directory-properties-area.md) to add the URL of your organization's privacy statement. As part of the first time invitation redemption process, an invited user must consent to your privacy terms to continue.
26
26
27
+
The updated experience for creating new users covered in this article is available as an Azure AD preview feature. This feature is enabled by default, but you can opt out by going to **Azure AD** > **Preview features** and disabling the **Create user experience** feature. For more information about previews, see [Supplemental Terms of Use for Microsoft Azure Previews](https://azure.microsoft.com/support/legal/preview-supplemental-terms/).
28
+
29
+
Instructions for the legacy create user process can be found in the [Add or delete users](../fundamentals/add-users-azure-active-directory.md) article.
30
+
27
31
## Before you begin
28
32
29
33
Make sure your organization's external collaboration settings are configured such that you're allowed to invite guests. By default, all users and admins can invite guests. But your organization's external collaboration policies might be configured to prevent certain types of users or admins from inviting guests. To find out how to view and set these policies, see [Enable B2B external collaboration and manage who can invite guests](external-collaboration-settings-configure.md).
@@ -32,39 +36,96 @@ Make sure your organization's external collaboration settings are configured suc
32
36
33
37
To add B2B collaboration users to the directory, follow these steps:
34
38
35
-
1. Sign in to the [Azure portal](https://portal.azure.com) as a user who is assigned a limited administrator directory role or the Guest Inviter role.
36
-
2. Search for and select **Azure Active Directory** from any page.
37
-
3. Under **Manage**, select **Users**.
38
-
4. Select **New user** > **Invite external user**. (Or, if you're using the legacy experience, select **New guest user**).
39
-
5. On the **New user** page, select **Invite user** and then add the guest user's information.
39
+
1. Sign in to the [Azure portal](https://portal.azure.com/) in the **User Administrator** role. A role with Guest Inviter privileges can also invite external users.
40
+
41
+
1. Navigate to **Azure Active Directory** > **Users**.
42
+
43
+
1. Select **Invite external user** from the menu.
44
+
45
+
46
+
47
+
### Basics
48
+
49
+
In this section, you're inviting the guest to your tenant using *their email address*. If you need to create a guest user with a domain account, use the [create new user process](../fundamentals/how-to-create-delete-users.md#create-a-new-user) but change the **User type** to **Guest**.
50
+
51
+
-**Email**: Enter the email address for the guest user you're inviting.
52
+
53
+
-**Display name**: Provide the display name.
54
+
55
+
-**Invitation message**: Select the **Send invite message** checkbox to customize a brief message to the guest. Provide a Cc recipient, if necessary.
56
+
57
+
58
+
59
+
Either select the **Review + invite** button to create the new user or **Next: Properties** to complete the next section.
60
+
61
+
### Properties
62
+
63
+
There are six categories of user properties you can provide. These properties can be added or updated after the user is created. To manage these details, go to **Azure AD** > **Users** and select a user to update.
64
+
65
+
-**Identity:** Enter the user's first and last name. Set the User type as either Member or Guest. For more information about the difference between external guests and members, see [B2B collaboration user properties](user-properties.md)
66
+
67
+
-**Job information:** Add any job-related information, such as the user's job title, department, or manager.
68
+
69
+
-**Contact information:** Add any relevant contact information for the user.
70
+
71
+
-**Parental controls:** For organizations like K-12 school districts, the user's age group may need to be provided. *Minors* are 12 and under, *Not adult* are 13-18 years old, and *Adults* are 18 and over. The combination of age group and consent provided by parent options determine the Legal age group classification. The Legal age group classification may limit the user's access and authority.
72
+
73
+
-**Settings:** Specify the user's global location.
74
+
75
+
Either select the **Review + invite** button to create the new user or **Next: Assignments** to complete the next section.
76
+
77
+
### Assignments
40
78
41
-
79
+
You can assign external users to a group, or Azure AD role when the account is created. You can assign the user to up to 20 groups or roles. Group and role assignments can be added after the user is created. The **Privileged Role Administrator** role is required to assign Azure AD roles.
42
80
43
-
-**Name.** The first and last name of the guest user.
44
-
-**Email address (required)**. The email address of the guest user.
45
-
-**Personal message (optional)** Include a personal welcome message to the guest user.
46
-
-**Groups**: You can add the guest user to one or more existing groups, or you can do it later.
47
-
-**Roles**: If you require Azure AD administrative permissions for the user, you can add them to an Azure AD role by selecting **User** next to **Roles**. [Learn more](../../role-based-access-control/role-assignments-external-users.md) about Azure roles for external guest users.
81
+
**To assign a group to the new user**:
82
+
83
+
1. Select **+ Add group**.
84
+
1. From the menu that appears, choose up to 20 groups from the list and select the **Select** button.
85
+
1. Select the **Review + create** button.
86
+
87
+
88
+
89
+
**To assign a role to the new user**:
90
+
91
+
1. Select **+ Add role**.
92
+
1. From the menu that appears, choose up to 20 roles from the list and select the **Select** button.
93
+
1. Select the **Review + invite** button.
94
+
95
+
### Review and create
96
+
97
+
The final tab captures several key details from the user creation process. Review the details and select the **Invite** button if everything looks good. An email invitation is automatically sent to the user. After you send the invitation, the user account is automatically added to the directory as a guest.
98
+
99
+
100
+
101
+
### External user invitations
102
+
<aname="resend-invitations-to-guest-users"></a>
103
+
104
+
When you invite an external guest user by sending an email invitation, you can check the status of the invitation from the user's details. If they haven't redeemed their invitation, you can resend the invitation email.
105
+
106
+
1. Go to **Azure AD** > **Users** and select the invited guest user.
107
+
1. In the **My Feed** section, locate the **B2B collaboration** tile.
108
+
- If the invitation state is **PendingAcceptance**, select the **Resend invitation** link to send another email and follow the prompts.
109
+
- You can also select the **Properties** for the user and view the **Invitation state**.
110
+
111
+
48
112
49
113
> [!NOTE]
50
114
> Group email addresses aren’t supported; enter the email address for an individual. Also, some email providers allow users to add a plus symbol (+) and additional text to their email addresses to help with things like inbox filtering. However, Azure AD doesn’t currently support plus symbols in email addresses. To avoid delivery issues, omit the plus symbol and any characters following it up to the @ symbol.
51
-
6. Select **Invite** to automatically send the invitation to the guest user.
52
-
53
-
After you send the invitation, the user account is automatically added to the directory as a guest.
54
115
55
-
116
+
The user is added to your directory with a user principal name (UPN) in the format *emailaddress*#EXT#\@*domain*. For example: *john_contoso.com#EXT#\@fabrikam.onmicrosoft.com*, where fabrikam.onmicrosoft.com is the organization from which you sent the invitations. ([Learn more about B2B collaboration user properties](user-properties.md).)
56
117
57
-
The user is added to your directory with a user principal name (UPN) in the format *emailaddress*#EXT#\@*domain*, for example, *john_contoso.com#EXT#\@fabrikam.onmicrosoft.com*, where fabrikam.onmicrosoft.com is the organization from which you sent the invitations. ([Learn more about B2B collaboration user properties](user-properties.md).)
58
118
## Add guest users to a group
59
-
If you need to manually add B2B collaboration users to a group, follow these steps:
119
+
120
+
If you need to manually add B2B collaboration users to a group after the user was invited, follow these steps:
60
121
61
122
1. Sign in to the [Azure portal](https://portal.azure.com) as an Azure AD administrator.
62
123
2. Search for and select **Azure Active Directory** from any page.
63
124
3. Under **Manage**, select **Groups**.
64
125
4. Select a group (or select **New group** to create a new one). It's a good idea to include in the group description that the group contains B2B guest users.
65
126
5. Under **Manage**, select **Members**.
66
127
6. Select **Add members**.
67
-
7.Do one of the following:
128
+
7.Complete one of the following set of steps:
68
129
69
130
-*If the guest user is already in the directory:*
70
131
@@ -93,7 +154,7 @@ To add B2B collaboration users to an application, follow these steps:
93
154
5. Under **Manage**, select **Users and groups**.
94
155
6. Select **Add user/group**.
95
156
7. On the **Add Assignment** page, select the link under **Users**.
96
-
8.Do one of the following:
157
+
8.Complete one of the following set of steps:
97
158
98
159
-*If the guest user is already in the directory:*
99
160
@@ -123,21 +184,6 @@ To add B2B collaboration users to an application, follow these steps:
123
184
124
185
d. Select **Assign**.
125
186
126
-
## Resend invitations to guest users
127
-
128
-
If a guest user hasn't yet redeemed their invitation, you can resend the invitation email.
129
-
130
-
1. Sign in to the [Azure portal](https://portal.azure.com) as an Azure AD administrator.
131
-
2. Search for and select **Azure Active Directory** from any page.
132
-
3. Under **Manage**, select **Users**.
133
-
4. In the list, select the user's name to open their user profile.
134
-
5. Under **My Feed**, in the **B2B collaboration** tile, select the **Manage (resend invitation / reset status** link.
135
-
6. If the user hasn't yet accepted the invitation, Select the **Yes** option to resend.
136
-
137
-
138
-
139
-
7. In the confirmation message, select **Yes** to confirm that you want to send the user a new email invitation for redeeming their guest account. An invitation URL will be generated and sent to the user.
140
-
141
187
## Next steps
142
188
143
189
- To learn how non-Azure AD admins can add B2B guest users, see [How users in your organization can invite guest users to an app](add-users-information-worker.md)
Copy file name to clipboardExpand all lines: articles/active-directory/external-identities/b2b-quickstart-add-guest-users-portal.md
+26-20Lines changed: 26 additions & 20 deletions
Display the source diff
Display the rich diff
Original file line number
Diff line number
Diff line change
@@ -5,7 +5,7 @@ services: active-directory
5
5
ms.author: cmulligan
6
6
author: csmulligan
7
7
manager: celestedg
8
-
ms.date: 02/16/2023
8
+
ms.date: 04/21/2023
9
9
ms.topic: quickstart
10
10
ms.service: active-directory
11
11
ms.subservice: B2B
@@ -22,47 +22,54 @@ In this quickstart, you'll learn how to add a new guest user to your Azure AD di
22
22
23
23
If you don’t have an Azure subscription, create a [free account](https://azure.microsoft.com/free/?WT.mc_id=A261C142F) before you begin.
24
24
25
+
The updated experience for creating new users covered in this article is available as an Azure AD preview feature. This feature is enabled by default, but you can opt out by going to **Azure AD** > **Preview features** and disabling the **Create user experience** feature. For more information about previews, see [Supplemental Terms of Use for Microsoft Azure Previews](https://azure.microsoft.com/support/legal/preview-supplemental-terms/).
26
+
27
+
Instructions for the legacy create user process can be found in the [Add or delete users](../fundamentals/add-users-azure-active-directory.md) article.
28
+
25
29
## Prerequisites
26
30
27
31
To complete the scenario in this quickstart, you need:
28
32
29
-
- A role that allows you to create users in your tenant directory, such as the Global Administrator role or a limited administrator directory role (for example, Guest inviter or User administrator).
33
+
- A role that allows you to create users in your tenant directory, such as the Global Administrator role or a limited administrator directory role such as Guest Inviter or User Administrator.
30
34
31
35
- Access to a valid email address outside of your Azure AD tenant, such as a separate work, school, or social email address. You'll use this email to create the guest account in your tenant directory and access the invitation.
32
36
33
-
## Add a new guest user in Azure AD
37
+
## Invite an external guest user
34
38
35
-
1. Sign in to the [Azure portal](https://portal.azure.com/) with an account that's been assigned the Global administrator, Guest, inviter, or User administrator role.
39
+
This quickstart guide provides the basic steps to invite an external user. To learn about all of the properties and settings that you can include when you invite an external user, see [How to create and delete a user](../fundamentals/how-to-create-delete-users.md).
36
40
37
-
1.Under **Azure services**, select **Azure Active Directory** (or use the search box to find and select **Azure Active Directory**).
41
+
1.Sign in to the [Azure portal](https://portal.azure.com/) using one of the roles listed in the Prerequisites.
38
42
39
-
:::image type="content" source="media/quickstart-add-users-portal/azure-active-directory-service.png" alt-text="Screenshot showing where to select the Azure Active Directory service.":::
43
+
1. Navigate to **Azure Active Directory** > **Users**.
40
44
41
-
1. Under **Manage**, select **Users**.
45
+
1. Select **Invite external user** from the menu.
46
+
47
+
48
+
49
+
### Basics for external users
42
50
43
-
:::image type="content" source="media/quickstart-add-users-portal/quickstart-users-portal-user.png" alt-text="Screenshot showing where to select the Users option.":::
51
+
In this section, you're inviting the guest to your tenant using *their email address*. For this quickstart, enter an email address that you can access.
44
52
45
-
1. Under **New user** select **Invite external user**.
53
+
-**Email**: Enter the email address for the guest user you're inviting.
46
54
47
-
:::image type="content" source="media/quickstart-add-users-portal/new-guest-user.png" alt-text="Screenshot showing where to select the New guest user option.":::
55
+
-**Display name**: Provide the display name.
48
56
49
-
1. On the **New user** page, select**Invite user**and then add the guest user's information.
57
+
-**Invitation message**: Select the**Send invite message**checkbox to customize a brief message to preview how the invitation message appears.
50
58
51
-
-**Name.** The first and last name of the guest user.
52
-
-**Email address (required)**. The email address of the guest user.
53
-
-**Personal message (optional)** Include a personal welcome message to the guest user.
54
-
-**Groups**: You can add the guest user to one or more existing groups, or you can do it later.
55
-
-**Roles**: If you require Azure AD administrative permissions for the user, you can add them to an Azure AD role.
59
+
56
60
57
-
:::image type="content" source="media/quickstart-add-users-portal/invite-user.png" alt-text="Screenshot showing the new user page.":::
61
+
Select the **Review and invite** button to finalize the process.
58
62
59
-
1. Select **Invite** to automatically send the invitation to the guest user. A notification appears in the upper right with the message **Successfully invited user**.
63
+
### Review and invite
64
+
65
+
The final tab captures several key details from the user creation process. Review the details and select the **Invite** button if everything looks good.
66
+
67
+
An email invitation is sent automatically.
60
68
61
69
1. After you send the invitation, the user account is automatically added to the directory as a guest.
62
70
63
71
:::image type="content" source="media/quickstart-add-users-portal/new-guest-user-directory.png" alt-text="Screenshot showing the new guest user in the directory.":::
64
72
65
-
66
73
## Accept the invitation
67
74
68
75
Now sign in as the guest user to see the invitation.
@@ -73,7 +80,6 @@ Now sign in as the guest user to see the invitation.
73
80
74
81
:::image type="content" source="media/quickstart-add-users-portal/quickstart-users-portal-email-small.png" alt-text="Screenshot showing the B2B invitation email.":::
75
82
76
-
77
83
1. In the email body, select **Accept invitation**. A **Review permissions** page opens in the browser.
78
84
79
85
:::image type="content" source="media/quickstart-add-users-portal/consent-screen.png" alt-text="Screenshot showing the Review permissions page.":::
0 commit comments