Unmanaged User Access SHALL Be Restricted
Last updated
Last updated
Blocking contact with unmanaged Teams users prevents these users from looking up internal users by their email address and initiating chats and calls within Teams. These users would still be able to join calls, assuming anonymous join is enabled. Additionally, unmanaged users may be added to Teams chats if the internal user initiates the contact. Unmanaged accounts are ones not managed by an organization, typically Teams personal accounts.
Unmanaged users SHALL NOT be enabled to initiate contact with internal users.
Internal users SHOULD NOT be enabled to initiate contact with unmanaged users.
Any Teams licensing supports this configuration.
Microsoft Resources:
To block unmanaged users for initiating contact:
Sign in to the Microsoft Teams admin center.
Select Users -> External access.
To completely block contact with unmanaged users, under Teams accounts not managed by an organization, set People in my organization can communicate with Teams users whose accounts aren't managed by an organization to Off.
To allow contact with unmanaged users only if the internal user initiates the contact:
Under Teams accounts not managed by an organization, set People in my organization can communicate with Teams users whose accounts aren't managed by an organization to On.
Clear the check next to External users with Teams accounts not managed by an organization can contact users in my organization.
This will vary depending on the organization and need for external collaboration with users not managed by an organization. A formal process for adding external domains for collaboration should be established so that end users have a place to request new external participants.
None Currently
Set External Access Policy: