Azure, Office 365, Technology

4. Implementing and Managing External Identities


Managing External Collaboration Settings in Azure Active Directory


Business to Business collaboration is about sharing resources

  1. Go to Azure AD -> Users -> Users Settings
  2. Scroll down and click on “Manage External Users Collaboration settings”
  3. From here you can set Guest user settings such as:
    – Access restrictions: which level of access to resources they have
    – Guest Invite Settings: who can invite guests to the tenant
    – Collaboration Restrictions: here you can restrict which specific domains can be invited to collaborate (allow any domain, allow specific domains, deny specific domains). You can use wild cards for subdomains-
    NB: he said this comes up on the exam


Inviting External Users (individually or Bulk)

Invite guest individually:

  1. Go to Azure AD -> Users -> New Guest User
  2. Enter the guest name and email
  3. You can select a group to add them to (EG: a project 365 group).
  4. You can also add them to a role
  5. Click invite

The guest will then get an email with the invitation.


Invite guests in Bulk

  1. Go to Azure AD -> Users -> Bulk Operations -> Bulk Invite
  2. Download the spreadsheet template
  3. Populate the spreadsheet with guest emails, add a message etc…
  4. Save the spreadsheet and upload it
  5. Click on Submit
  6. This will create a job to invite all the users on the spreadsheet

Managing External Accounts in Azure AD

This is very similar as managing normal Azure users.

  1. Go to Azure AD -> Users
  2. Here you can see the guest users. They will be listed with the type “Guest User”
  3. Click on the Guest to edit them (block them from signing in, add to groups, roles etc…)
  4. You can also give them licences in the same way as normal user

Leave a Reply

Your email address will not be published. Required fields are marked *