You signed in with another tab or window. Reload to refresh your session.You signed out in another tab or window. Reload to refresh your session.You switched accounts on another tab or window. Reload to refresh your session.Dismiss alert
Copy file name to clipboardExpand all lines: articles/active-directory/external-identities/add-users-administrator.md
+74-33Lines changed: 74 additions & 33 deletions
Display the source diff
Display the rich diff
Original file line number
Diff line number
Diff line change
@@ -7,7 +7,7 @@ services: active-directory
7
7
ms.service: active-directory
8
8
ms.subservice: B2B
9
9
ms.topic: how-to
10
-
ms.date: 10/12/2022
10
+
ms.date: 04/11/2023
11
11
12
12
ms.author: cmulligan
13
13
author: csmulligan
@@ -32,31 +32,87 @@ Make sure your organization's external collaboration settings are configured suc
32
32
33
33
To add B2B collaboration users to the directory, follow these steps:
34
34
35
-
1. Sign in to the [Azure portal](https://portal.azure.com) as a user who is assigned a limited administrator directory role or the Guest Inviter role.
36
-
2. Search for and select **Azure Active Directory** from any page.
37
-
3. Under **Manage**, select **Users**.
38
-
4. Select **New user** > **Invite external user**. (Or, if you're using the legacy experience, select **New guest user**).
39
-
5. On the **New user** page, select **Invite user** and then add the guest user's information.
35
+
1. Sign in to the [Azure portal](https://portal.azure.com/) in the **User Administrator** role. A role with Guest Inviter privileges can also invite external users.
40
36
41
-
37
+
1. Navigate to **Azure Active Directory** > **Users**.
42
38
43
-
-**Name.** The first and last name of the guest user.
44
-
-**Email address (required)**. The email address of the guest user.
45
-
-**Personal message (optional)** Include a personal welcome message to the guest user.
46
-
-**Groups**: You can add the guest user to one or more existing groups, or you can do it later.
47
-
-**Roles**: If you require Azure AD administrative permissions for the user, you can add them to an Azure AD role by selecting **User** next to **Roles**. [Learn more](../../role-based-access-control/role-assignments-external-users.md) about Azure roles for external guest users.
39
+
1. Select **Invite external user** from the menu.
48
40
49
-
> [!NOTE]
50
-
> Group email addresses aren’t supported; enter the email address for an individual. Also, some email providers allow users to add a plus symbol (+) and additional text to their email addresses to help with things like inbox filtering. However, Azure AD doesn’t currently support plus symbols in email addresses. To avoid delivery issues, omit the plus symbol and any characters following it up to the @ symbol.
51
-
6. Select **Invite** to automatically send the invitation to the guest user.
52
-
53
-
After you send the invitation, the user account is automatically added to the directory as a guest.
41
+
42
+
43
+
### Basics
44
+
45
+
In this section, you're inviting the guest to your tenant using *their email address*. If you need to create a guest user with a domain account, use the [create new user process](../fundamentals/how-to-create-delete-users.md#create-a-new-user) but change the **User type** to **Guest**.
46
+
47
+
-**Email**: Enter the email address for the guest user you're inviting.
48
+
49
+
-**Display name**: Provide the display name.
50
+
51
+
-**Invitation message**: Select the **Send invite message** checkbox to customize a brief message to the guest. Provide a Cc recipient, if necessary.
52
+
53
+
54
+
55
+
Either select the **Review + invite** button to create the new user or **Next: Properties** to complete the next section.
56
+
57
+
### Properties
58
+
59
+
There are six categories of user properties you can provide. These properties can be added or updated after the user is created. To manage these details, go to **Azure AD** > **Users** and select a user to update.
60
+
61
+
-**Identity:** Enter the user's first and last name. Set the User type as either Member or Guest. For more information about the difference between external guests and members, see [B2B collaboration user properties](user-properties.md)
62
+
63
+
-**Job information:** Add any job-related information, such as the user's job title, department, or manager.
64
+
65
+
-**Contact information:** Add any relevant contact information for the user.
66
+
67
+
-**Parental controls:** For organizations like K-12 school districts, the user's age group may need to be provided. *Minors* are 12 and under, *Not adult* are 13-18 years old, and *Adults* are 18 and over. The combination of age group and consent provided by parent options determine the Legal age group classification. The Legal age group classification may limit the user's access and authority.
68
+
69
+
-**Settings:** Specify the user's global location.
70
+
71
+
Either select the **Review + invite** button to create the new user or **Next: Assignments** to complete the next section.
72
+
73
+
### Assignments
74
+
75
+
You can assign external users to a group, or Azure AD role when the account is created. You can assign the user to up to 20 groups or roles. Group and role assignments can be added after the user is created. The **Privileged Role Administrator** role is required to assign Azure AD roles.
76
+
77
+
**To assign a group to the new user**:
78
+
79
+
1. Select **+ Add group**.
80
+
1. From the menu that appears, choose up to 20 groups from the list and select the **Select** button.
81
+
1. Select the **Review + create** button.
82
+
83
+
84
+
85
+
**To assign a role to the new user**:
86
+
87
+
1. Select **+ Add role**.
88
+
1. From the menu that appears, choose up to 20 roles from the list and select the **Select** button.
89
+
1. Select the **Review + invite** button.
90
+
91
+
### Review and create
92
+
93
+
The final tab captures several key details from the user creation process. Review the details and select the **Invite** button if everything looks good. An email invitation is automatically sent to the user. After you send the invitation, the user account is automatically added to the directory as a guest.
54
94
55
95
56
96
97
+
### External user invitations
98
+
99
+
When you invite an external guest user by sending an email invitation, you can check the status of the invitation from the user's details. If they haven't redeemed their invitation, you can resend the invitation email.
100
+
101
+
1. Go to **Azure AD** > **Users** and select the invited guest user.
102
+
1. In the **My Feed** section, locate the **B2B collaboration** tile.
103
+
- If the invitation state is **PendingAcceptance**, select the **Resend invitation** link to send another email and follow the prompts.
104
+
- You can also select the **Properties** for the user and view the **Invitation state**.
105
+
106
+
107
+
108
+
> [!NOTE]
109
+
> Group email addresses aren’t supported; enter the email address for an individual. Also, some email providers allow users to add a plus symbol (+) and additional text to their email addresses to help with things like inbox filtering. However, Azure AD doesn’t currently support plus symbols in email addresses. To avoid delivery issues, omit the plus symbol and any characters following it up to the @ symbol.
110
+
57
111
The user is added to your directory with a user principal name (UPN) in the format *emailaddress*#EXT#\@*domain*, for example, *john_contoso.com#EXT#\@fabrikam.onmicrosoft.com*, where fabrikam.onmicrosoft.com is the organization from which you sent the invitations. ([Learn more about B2B collaboration user properties](user-properties.md).)
112
+
58
113
## Add guest users to a group
59
-
If you need to manually add B2B collaboration users to a group, follow these steps:
114
+
115
+
If you need to manually add B2B collaboration users to a group after the user was invited, follow these steps:
60
116
61
117
1. Sign in to the [Azure portal](https://portal.azure.com) as an Azure AD administrator.
62
118
2. Search for and select **Azure Active Directory** from any page.
@@ -123,21 +179,6 @@ To add B2B collaboration users to an application, follow these steps:
123
179
124
180
d. Select **Assign**.
125
181
126
-
## Resend invitations to guest users
127
-
128
-
If a guest user hasn't yet redeemed their invitation, you can resend the invitation email.
129
-
130
-
1. Sign in to the [Azure portal](https://portal.azure.com) as an Azure AD administrator.
131
-
2. Search for and select **Azure Active Directory** from any page.
132
-
3. Under **Manage**, select **Users**.
133
-
4. In the list, select the user's name to open their user profile.
134
-
5. Under **My Feed**, in the **B2B collaboration** tile, select the **Manage (resend invitation / reset status** link.
135
-
6. If the user hasn't yet accepted the invitation, Select the **Yes** option to resend.
136
-
137
-
138
-
139
-
7. In the confirmation message, select **Yes** to confirm that you want to send the user a new email invitation for redeeming their guest account. An invitation URL will be generated and sent to the user.
140
-
141
182
## Next steps
142
183
143
184
- To learn how non-Azure AD admins can add B2B guest users, see [How users in your organization can invite guest users to an app](add-users-information-worker.md)
Copy file name to clipboardExpand all lines: articles/active-directory/external-identities/b2b-quickstart-add-guest-users-portal.md
+22-20Lines changed: 22 additions & 20 deletions
Display the source diff
Display the rich diff
Original file line number
Diff line number
Diff line change
@@ -5,7 +5,7 @@ services: active-directory
5
5
ms.author: cmulligan
6
6
author: csmulligan
7
7
manager: celestedg
8
-
ms.date: 02/16/2023
8
+
ms.date: 04/11/2023
9
9
ms.topic: quickstart
10
10
ms.service: active-directory
11
11
ms.subservice: B2B
@@ -26,43 +26,46 @@ If you don’t have an Azure subscription, create a [free account](https://azure
26
26
27
27
To complete the scenario in this quickstart, you need:
28
28
29
-
- A role that allows you to create users in your tenant directory, such as the Global Administrator role or a limited administrator directory role (for example, Guest inviter or User administrator).
29
+
- A role that allows you to create users in your tenant directory, such as the Global Administrator role or a limited administrator directory role such as Guest Inviter or User Administrator.
30
30
31
31
- Access to a valid email address outside of your Azure AD tenant, such as a separate work, school, or social email address. You'll use this email to create the guest account in your tenant directory and access the invitation.
32
32
33
-
## Add a new guest user in Azure AD
33
+
## Invite an external guest user
34
34
35
-
1. Sign in to the [Azure portal](https://portal.azure.com/) with an account that's been assigned the Global administrator, Guest, inviter, or User administrator role.
35
+
This quickstart guide provides the basic steps to invite an external user. To learn about all of the properties and settings that you can include when you invite an external user, see [How to create and delete a user](../fundamentals/how-to-create-delete-users.md).
36
36
37
-
1.Under **Azure services**, select **Azure Active Directory** (or use the search box to find and select **Azure Active Directory**).
37
+
1.Sign in to the [Azure portal](https://portal.azure.com/) using one of the roles listed in the Prerequisites.
38
38
39
-
:::image type="content" source="media/quickstart-add-users-portal/azure-active-directory-service.png" alt-text="Screenshot showing where to select the Azure Active Directory service.":::
39
+
1. Navigate to **Azure Active Directory** > **Users**.
40
40
41
-
1. Under **Manage**, select **Users**.
41
+
1. Select **Invite external user** from the menu.
42
+
43
+
44
+
45
+
### Basics for external users
46
+
47
+
In this section, you're inviting the guest to your tenant using *their email address*. For this quickstart, enter an email address that you can access.
42
48
43
-
:::image type="content" source="media/quickstart-add-users-portal/quickstart-users-portal-user.png" alt-text="Screenshot showing where to select the Users option.":::
49
+
-**Email**: Enter the email address for the guest user you're inviting.
44
50
45
-
1. Under **New user** select **Invite external user**.
51
+
-**Display name**: Provide the display name.
46
52
47
-
:::image type="content" source="media/quickstart-add-users-portal/new-guest-user.png" alt-text="Screenshot showing where to select the New guest user option.":::
53
+
-**Invitation message**: Select the **Send invite message** checkbox to customize a brief message to preview how the invitation message appears.
48
54
49
-
1. On the **New user** page, select **Invite user** and then add the guest user's information.
55
+
50
56
51
-
-**Name.** The first and last name of the guest user.
52
-
-**Email address (required)**. The email address of the guest user.
53
-
-**Personal message (optional)** Include a personal welcome message to the guest user.
54
-
-**Groups**: You can add the guest user to one or more existing groups, or you can do it later.
55
-
-**Roles**: If you require Azure AD administrative permissions for the user, you can add them to an Azure AD role.
57
+
Select the **Review and invite** button to finalize the process.
56
58
57
-
:::image type="content" source="media/quickstart-add-users-portal/invite-user.png" alt-text="Screenshot showing the new user page.":::
59
+
### Review and invite
58
60
59
-
1. Select **Invite** to automatically send the invitation to the guest user. A notification appears in the upper right with the message **Successfully invited user**.
61
+
The final tab captures several key details from the user creation process. Review the details and select the **Invite** button if everything looks good.
62
+
63
+
An email invitation is sent automatically.
60
64
61
65
1. After you send the invitation, the user account is automatically added to the directory as a guest.
62
66
63
67
:::image type="content" source="media/quickstart-add-users-portal/new-guest-user-directory.png" alt-text="Screenshot showing the new guest user in the directory.":::
64
68
65
-
66
69
## Accept the invitation
67
70
68
71
Now sign in as the guest user to see the invitation.
@@ -73,7 +76,6 @@ Now sign in as the guest user to see the invitation.
73
76
74
77
:::image type="content" source="media/quickstart-add-users-portal/quickstart-users-portal-email-small.png" alt-text="Screenshot showing the B2B invitation email.":::
75
78
76
-
77
79
1. In the email body, select **Accept invitation**. A **Review permissions** page opens in the browser.
78
80
79
81
:::image type="content" source="media/quickstart-add-users-portal/consent-screen.png" alt-text="Screenshot showing the Review permissions page.":::
0 commit comments