Skip to content

Commit c16099f

Browse files
authored
Update Set-CsTenantFederationConfiguration.md
Updating reliance on AllowFederatedUsers
1 parent 94d8f29 commit c16099f

File tree

1 file changed

+6
-3
lines changed

1 file changed

+6
-3
lines changed

teams/teams-ps/MicrosoftTeams/Set-CsTenantFederationConfiguration.md

Lines changed: 6 additions & 3 deletions
Original file line numberDiff line numberDiff line change
@@ -234,7 +234,8 @@ If the `New-CsEdgeAllowList` cmdlet is used then users can only communicate with
234234
Note that string values cannot be passed directly to the AllowedDomains parameter.
235235
Instead, you must create an object reference using the `New-CsEdgeAllowList` cmdlet or the `New-CsEdgeAllowAllKnownDomains` cmdlet and then use the object reference variable as the parameter value.
236236

237-
The AllowedDomains parameter can support up to 4,000 domains. Please note that the property AllowFederatedUsers must be set to True for values under AllowedDomains to be considered.
237+
The AllowedDomains parameter can support up to 4,000 domains.
238+
**Important:** The _AllowFederatedUsers_ property must be set to _True_ for the _AllowedDomains_ list to take effect. If _AllowFederatedUsers_ is set to _False_, users will be blocked from communicating with all external domains regardless of the values in _AllowedDomains_ or any _ExternalAccessPolicy_ instance.
238239

239240
```yaml
240241
Type: Boolean
@@ -294,9 +295,9 @@ Accept wildcard characters: False
294295
> Applicable: Microsoft Teams
295296

296297
When set to True (the default value) users will be potentially allowed to communicate with users from other domains.
297-
If this property is set to False then users cannot communicate with users from other domains, regardless of the values assigned to the AllowedDomains and BlockedDomains properties or any instances of the ExternalAccessPolicy. In effect, the AllowFederatedUsers property serves as a master switch that globally enables or disables federation across the Tenant, overridding all other policy settings.
298+
If this property is set to False then users cannot communicate with users from other domains, regardless of the values assigned to the _AllowedDomains_ and _BlockedDomains_ properties or any _ExternalAccessPolicy_ instances. In effect, the _AllowFederatedUsers_ property serves as a master switch that globally enables or disables federation across the Tenant, overridding all other policy settings.
298299

299-
To block all domains while selectively allowing specific users to communicate externally via explicit ExternalAccessPolicy instances, set AllowFederatedUsers to True and leave the AllowedDomains property empty.
300+
To block all domains while selectively allowing specific users to communicate externally via explicit _ExternalAccessPolicy_ instances, set _AllowFederatedUsers_ to _True_ and leave the _AllowedDomains_ property empty.
300301

301302
```yaml
302303
Type: Boolean
@@ -367,7 +368,9 @@ Accept wildcard characters: False
367368

368369
If the AllowedDomains property has been set to AllowAllKnownDomains, then users will be allowed to communicate with users from any domain except domains that appear in the blocked domains list.
369370
If the AllowedDomains property has not been set to AllowAllKnownDomains, then the blocked list is ignored, and users can only communicate with domains that have been expressly added to the allowed domains list.
371+
370372
The BlockedDomains parameter can support up to 4,000 domains.
373+
**Important:** The _AllowFederatedUsers_ property must be set to _True_ for the _BlockedDomains_ list to take effect. If _AllowFederatedUsers_ is set to _False_, users will be blocked from communicating with all external domains regardless of the values in _BlockedDomains_ or any _ExternalAccessPolicy_ instance.
371374

372375
```yaml
373376
Type: List

0 commit comments

Comments
 (0)