You signed in with another tab or window. Reload to refresh your session.You signed out in another tab or window. Reload to refresh your session.You switched accounts on another tab or window. Reload to refresh your session.Dismiss alert
Copy file name to clipboardExpand all lines: articles/active-directory/enterprise-users/directory-self-service-signup.md
+9-6Lines changed: 9 additions & 6 deletions
Display the source diff
Display the rich diff
Original file line number
Diff line number
Diff line change
@@ -1,5 +1,5 @@
1
1
---
2
-
title: Self-service sign-up for email-verified users - Azure AD | Microsoft Docs
2
+
title: Self-service signup for email-verified users - Azure AD | Microsoft Docs
3
3
description: Use self-service sign-up in an Azure Active Directory (Azure AD) organization
4
4
services: active-directory
5
5
documentationcenter: ''
@@ -11,7 +11,7 @@ ms.service: active-directory
11
11
ms.subservice: enterprise-users
12
12
ms.topic: overview
13
13
ms.workload: identity
14
-
ms.date: 06/23/2022
14
+
ms.date: 03/02/2022
15
15
ms.author: barclayn
16
16
ms.reviewer: elkuzmen
17
17
ms.custom: it-pro
@@ -46,24 +46,27 @@ Admins have two self-service controls today. They can control whether:
46
46
47
47
An admin can configure these capabilities using the following Azure AD cmdlet Set-MsolCompanySettings parameters:
48
48
49
-
***AllowEmailVerifiedUsers** controls whether users can join the tenant by email validation. To join, the user must have an email address in a domain which matches one of the verified domains in the tenant. This setting is applied company-wide for all domains in the tenant. If you set that parameter to $false, no email-verified user can join the tenant.
49
+
***AllowEmailVerifiedUsers** controls whether users can join the tenant by email validation. To join, the user must have an email address in a domain that matches one of the verified domains in the tenant. This setting is applied company-wide for all domains in the tenant. If you set that parameter to $false, no email-verified user can join the tenant.
50
50
***AllowAdHocSubscriptions** controls the ability for users to perform self-service sign-up. If you set that parameter to $false, no user can perform self-service sign-up.
51
51
52
52
AllowEmailVerifiedUsers and AllowAdHocSubscriptions are tenant-wide settings that can be applied to a managed or unmanaged tenant. Here's an example where:
53
53
54
54
* You administer a tenant with a verified domain such as contoso.com
55
-
* You use B2B collaboration from a different tenant to invite a user that does not already exist ([email protected]) in the home tenant of contoso.com
55
+
* You use B2B collaboration from a different tenant to invite a user that doesn't already exist ([email protected]) in the home tenant of contoso.com
56
56
* The home tenant has the AllowEmailVerifiedUsers turned on
57
57
58
58
If the preceding conditions are true, then a member user is created in the home tenant, and a B2B guest user is created in the inviting tenant.
59
59
60
+
>[!NOTE]
61
+
> Office 365 for Education users, are currently the only ones who are added to existing managed tenants even when this toggle is enabled
62
+
60
63
For more information on Flow and Power Apps trial sign-ups, see the following articles:
61
64
62
65
*[How can I prevent my existing users from starting to use Power BI?](https://support.office.com/article/Power-BI-in-your-Organization-d7941332-8aec-4e5e-87e8-92073ce73dc5#bkmk_preventjoining)
63
66
*[Flow in your organization Q&A](/power-automate/organization-q-and-a)
64
67
65
68
### How do the controls work together?
66
-
These two parameters can be used in conjunction to define more precise control over self-service sign-up. For example, the following command will allow users to perform self-service sign-up, but only if those users already have an account in Azure AD (in other words, users who would need an email-verified account to be created first cannot perform self-service sign-up):
69
+
These two parameters can be used in conjunction to define more precise control over self-service sign-up. For example, the following command allows users to perform self-service sign-up, but only if those users already have an account in Azure AD (in other words, users who would need an email-verified account to be created first can't perform self-service sign-up):
@@ -73,7 +76,7 @@ The following flowchart explains the different combinations for these parameters
73
76
74
77

75
78
76
-
The details of this setting can be retrieved by the following PowerShell cmdlet Get-MsolCompanyInformation. For more information on this, see [Get-MsolCompanyInformation](/powershell/module/msonline/get-msolcompanyinformation).
79
+
This setting's details may be retrieved using the PowerShell cmdlet Get-MsolCompanyInformation. For more information on this, see [Get-MsolCompanyInformation](/powershell/module/msonline/get-msolcompanyinformation).
0 commit comments