Collaborating with Guests in a SharePoint Site

---

🔑 Why This Matters

• SharePoint is often used for collaboration with external partners, vendors, or contractors.

• Guest access is controlled at multiple levels:

  1. Entra ID (Azure AD) → Controls if external users are allowed at all.

  2. Microsoft 365 Groups → Controls whether groups can include guests.

  3. SharePoint org-level → Sets the maximum sharing level allowed in the tenant.

  4. Site-level → Controls sharing on each site.

👉 If guest collaboration doesn’t work → check all four levels.

---

🛠️ Step 1 – Configure Microsoft Entra ID External Collaboration

• This is the highest-level control. If blocked here → no guests can be invited.

✅ Steps:

1. Sign in to Entra admin center → https://entra.microsoft.com/

2. Go to External identities → External collaboration settings.

3. Choose:

   • Member users and admins can invite guests OR

   • Anyone in the org can invite guests.

4. Check Collaboration restrictions → make sure guest domains aren’t blocked.

5. Optional: Restrict guest access to directory info (so guests can’t see all users).

---

🛠️ Step 2 – Configure Microsoft 365 Groups Guest Settings

• SharePoint modern team sites are tied to a Microsoft 365 Group.

• If Groups don’t allow guests → SharePoint site won’t either.

✅ Steps:

1. In Microsoft 365 admin center → go to Settings → Org settings → Microsoft 365 Groups.

2. Ensure both are checked:

   • ✔️ Group owners can add guests.

   • ✔️ Guests can access group content.

---

🛠️ Step 3 – Configure SharePoint Organization-Level Sharing

• This sets the maximum level of external sharing across SharePoint & OneDrive.

• Sites cannot be more permissive than the org setting.

✅ Options:

• Anyone → allows unauthenticated links (anyone with link can access).

• New and existing guests → requires authentication (preferred for security).

✅ Steps:

1. In SharePoint admin center → Policies → Sharing.

2. Choose sharing level: Anyone OR New and existing guests.

3. Save changes.

---

🛠️ Step 4 – Create the SharePoint Site

• Must create the site where collaboration will happen.

✅ Steps:

1. In SharePoint admin center → Sites → Active sites → Create.

2. Select Team site.

3. Enter site name + group owner.

4. Choose public or private.

5. Finish setup.

---

🛠️ Step 5 – Configure Site-Level Sharing

• Even if the org allows “Anyone,” the site can still restrict to “New and existing guests.”

✅ Steps:

1. In SharePoint admin center → Active sites → Select your site.

2. Go to Settings → More sharing settings.

3. Choose: Anyone OR New and existing guests.

4. Save changes.

⚠️ Note: Entire site cannot be shared with “Anyone,” but individual files/folders can.

---

🛠️ Step 6 – Invite Guests

• Now that settings are ready, you can add internal & external users.

• Guest access is controlled through the Microsoft 365 Group linked to the site.

✅ Steps:

1. Open your SharePoint site.

2. Click Members → Add members.

3. Enter email addresses of users/guests → Save.

---

⚠️ Security Notes

• Removing guest licenses or revoking access removes their ability to sign in.

• Use sensitivity labels to enforce stricter external sharing policies.

• Use conditional access policies (MFA, device compliance) for guest security.

---

✅ Quick Recap for Exams / Practice:

1. Entra ID → allow guest collaboration.

2. M365 Groups → allow guests in groups.

3. SharePoint org-level → set maximum sharing (Anyone vs Guests only).

4. Site-level → fine-tune sharing.

5. Invite users → via Microsoft 365 Group / site members.