Managing Microsoft Teams - Configuring External Collaboration for Guest Access and Security Requirements

Configuring External Collaboration for Guest Access

Question

Note: This question is part of a series of questions that present the same scenario.

Each question in the series contains a unique solution that might meet the stated goals.

Some question sets might have more than one correct solution, while others might not have a correct solution.

After you answer a question in this section, you will NOT be able to return to it.

As a result, these questions will not appear in the review screen.

Your company has a Microsoft 365 subscription.

You plan to configure the environment to allow external users to collaborate in Microsoft Teams by using guest access.

The company implements a new security policy that has the following requirements: -> Only guest users from specific domains must be allowed to connect to collaborate by using Microsoft Teams.

-> Guest users must be prevented from inviting other guests.

You need to recommend a solution to meet the security policy requirements.

Solution: From the Azure Active Directory, you modify the External collaboration settings.

Does this meet the goal?

Answers

Explanations

Click on the arrows to vote for the correct answer

A. B.

A.

Answer: B. No

Explanation: The recommended solution of modifying External collaboration settings in Azure Active Directory will not fully meet the security policy requirements.

While it is possible to configure the domains from which guest users are allowed to collaborate in Microsoft Teams using External collaboration settings in Azure Active Directory, it is not possible to prevent guest users from inviting other guests using this method. The External collaboration settings only allow you to specify the domains from which guests can be added and does not provide any granular controls to prevent guest users from inviting other guests.

To meet the security policy requirements, the recommended solution should include the following steps:

  1. Configure Azure AD B2B settings to specify the domains from which guests can be invited.
  2. Create a guest access policy in Teams that prevents guest users from inviting other guests.

By completing these two steps, you can meet the requirements of the security policy while allowing external users to collaborate in Microsoft Teams using guest access.