Microsoft Adds Guest Access to Microsoft Teams

Microsoft today added the ability to invite external guests into Microsoft Teams for organizations using Office 365 services.

The new capability currently only works for external guests that have Azure Active Directory accounts (although there are "more than 870 million" Azure AD accounts in existence, according to Microsoft's announcement). Microsoft plans to make it possible to invite guests with Microsoft accounts, too, in the near future. Microsoft Teams is a "collaboration workspace" solution for Office 365 users. It's enabled via Microsoft Groups and delivers persistent chat sessions for end users, as well as meetings, messaging and phone calls, according to Microsoft's FAQ for administrators.

The guest invite capability in Microsoft Teams is enabled through the Azure AD B2B service, which is currently available in Europe and North America. Microsoft Teams invitations get the same sort of security assurances as enabled via the Azure AD B2B service, Microsoft's announcement promised. For instance, conditional access policies can be imposed, including an insistence on the use of multifactor authentication to verify user identities. According to Microsoft's announcement, "guest user content and activities are under the same compliance and auditing protection as the rest of Office 365." IT pros can revoke guest access, if they want.

The guest access capability is not turned on by default for Office 365 tenancies, according to this "Administrator Settings" document. It appears that IT pros have to toggle it on using Office 365 Admin Center settings, although the process isn't described in Microsoft's document.

Microsoft Team "owners" are empowered to invite guests. A team owner can be any end user in an organization using Office 365 where Teams is enabled. The team that gets created can be either public or private. Team owners set the permissions for the team members. They can control whether guests can create "channels, tabs and connectors," as well as notifications via "@[name]" mentions, plus access to the use of "GIFs, stickers and memes," according to Microsoft's "Teams and Channels" FAQ.

In essence, a "channel" is just a focused chat conversation. A "tab" is part of the user interface in Microsoft Teams, which can be used to add applications and bots to the Microsoft Teams experience. The "@mentions" feature lets Microsoft Teams users flag other users, or even other channels or teams, by adding the "@" symbol before those names. A team owner can have up to 999 people to a particular team.

On the applications side, Microsoft announced earlier this week that it expanded Microsoft Teams by adding support for Botkit, a toolkit for making bots for internal or external use. In addition, Microsoft plans to support the integration of ServiceNow service management solutions to show notifications in Microsoft Teams. Other additions coming to Microsoft Teams include integrations with Atlassian and GitHub developer collaboration tools. Microsoft's new partnership with Adobe, announced last week, will add collaboration capabilities in Microsoft Teams for the "Adobe Creative Cloud, Document Cloud and Experience Cloud."

Guests in Microsoft Teams have a few restrictions by default, according to this "Guest Access in Microsoft Teams" document. They can't share chat files or add applications. Guests can't create a team or view organizational charts by default. They also can't search for a public team and join it. They have to be invited.

IT pros ultimately have control over Team owners by specifying who can or cannot create a group in Office 365. Microsoft Teams is turned on by default tenancy wide for business Office 365 users, so IT pros wanting to disable access have to revoke individual Microsoft Teams licenses for end users via the Office 365 Admin Center or via PowerShell. In contrast, Office 365 Education users have the Microsoft Teams feature turned off by default.

About the Author

Kurt Mackie is senior news producer for the 1105 Enterprise Computing Group.


  • Ransomware: What It Means for Your Database Servers

    Ransomware affects databases in very specific ways. Joey describes the mechanics of a SQL Server ransomware attack, what DBAs can do to protect their systems, and what security measures they should be advocating for.

  • Windows Admin Center vs. Hyper-V Manager: What's Better for Managing VMs?

    Microsoft's preferred interface for Windows Server is Windows Admin Center, but can it really replace Hyper-V Manager for managing virtual machines? Brien compares the two management tools.

  • Microsoft Offers More Help on Windows Server 2008 Upgrades

    Microsoft this week published additional help resources for organizations stuck on Windows Server 2008, which fell out of support on Jan. 14.

  • Microsoft Ups Its Carbon Reduction Goals

    Microsoft on Thursday announced a corporatewide carbon reduction effort that aims to make the company "carbon negative" by 2030.

comments powered by Disqus

Office 365 Watch

Sign up for our newsletter.

Terms and Privacy Policy consent

I agree to this site's Privacy Policy.