Great explanation, Szymon, thanks. Saved me a ton of reading the MS documentation (comprehensive, but it's hard to find what you need for a certain problem)
I would recommend a dedicated SharePoint group for external users and sharing the whole site by adding the permissions to the external users. It is a little more work, but it will be easier to maintain the site over a longer period of time. In general, I prefer the Advanced permission setting view.
@@szymonbochniak Hi Szymon. I've decided to go the Identity governance route and create Access Packages for our external users. I need to basically clone a standardized Sharepoint site, tweak it a pinch, then create each access package per external site. This is a super cool method, but does require an Azure Premium license.
thanks for the presentation. I keep getting an error message when attempting to share a site that says my organization policies do not allow to share with these uses and to go to the external sharing in office 365 to enable it. Can you provide instructions on enabling that functionality?
It looks like External sharing is turned off in the Microsoft 365 Admin Center. Check this: learn.microsoft.com/en-us/sharepoint/troubleshoot/sharing-and-permissions/organization-policies-do-not-allow-you-to-share-with-users-error
I want to send the link of my site to anyone outside organisation. I set up everything to ‘anyone’ both in the admin center (global setting) and on the selected active site. But when I tried to copy the link for sharing, it shows that the “anyone with link” is still greyed out. 😢 Is it possible to share link of the sharepoint “site” with anyone outside organisation without signing-in at all?
Thanks but it doesn't work. The user clicks on the link in the email and then gets a screen that says, "We're sorry, but [external email address] can't be found in the [site domain name] directory." Can you please help?
Panie Szymonie, jeśli można to mam pytanie odnośnie tego udostępniania. Mamy w organizacji włączone udostępnianie tylko dla istniejących gości. Gości zapraszam zakładając konta gościa przez Azure AD. W jaki sposób mogę sprawdzić kto ma dostęp i do czego? W witrynach widzę jedynie właścicieli i administratorów którzy są członkami naszej organizacji. Cała reszta trafia do grupy członkowie witryny, ale nie widzę nigdzie możliwości zobaczenia kto w tej grupie jest.
Po pierwsze zejdźmy z tego Pana ;) Niestety nie ma dobrego raportu w pudełku. Tutaj znajduje się artykuł: office365atwork.com/sharepoint/sharepoint-online-logs/ jest tam raport external sharing. Wersje exportowana do Excel może być przydatna. Sharegate ma fajny raport na temat external sharing.
Dla pracowników firmy tak, nie opcji dostępu bez uwierzytelnienia. Zewnętrzne osoby można zapraszać bez licencji, ale nie mogą to być pracownicy firmy.
⭐ BE COPILOT READY: Join free online course that will prepare you for Copilot & Generative AI: office365atwork.com/prepare
Great explanation, Szymon, thanks. Saved me a ton of reading the MS documentation (comprehensive, but it's hard to find what you need for a certain problem)
Glad it was helpful!
Really appreciated this video. Thanks for taking the time to make and explain the security.
Glad it was helpful!
Thank you Szymon! I learned some new ways to manage external users. What do you recommend to share an entire Sharepoint site with external users?
I would recommend a dedicated SharePoint group for external users and sharing the whole site by adding the permissions to the external users. It is a little more work, but it will be easier to maintain the site over a longer period of time.
In general, I prefer the Advanced permission setting view.
@@szymonbochniak Hi Szymon. I've decided to go the Identity governance route and create Access Packages for our external users. I need to basically clone a standardized Sharepoint site, tweak it a pinch, then create each access package per external site. This is a super cool method, but does require an Azure Premium license.
Thanks for clarifying this. It seems there should be a global "Read" option in addition to "Edit" and "View" to allow downloading but not editing...
I believe View is more or less Read access. During the sharing with View rights you can decide if user can or not download the file.
This video useful for us! Thanks for sharing.
Glad it was helpful!
Thanks a lot, it's the same for directories
Glad it helped 👍
Excellent explanation, thank you
Glad it was helpful!
thanks for the presentation. I keep getting an error message when attempting to share a site that says my organization policies do not allow to share with these uses and to go to the external sharing in office 365 to enable it. Can you provide instructions on enabling that functionality?
It looks like External sharing is turned off in the Microsoft 365 Admin Center. Check this: learn.microsoft.com/en-us/sharepoint/troubleshoot/sharing-and-permissions/organization-policies-do-not-allow-you-to-share-with-users-error
Thank you.
Is there an option to get alert when file has shared to external user? if yes can you please help me with the steps
Check this: www.sharepointdiary.com/2020/01/sharepoint-online-external-sharing-alerts.html. I did not used that, but it sounds reasonable.
I want to send the link of my site to anyone outside organisation.
I set up everything to ‘anyone’ both in the admin center (global setting) and on the selected active site. But when I tried to copy the link for sharing, it shows that the “anyone with link” is still greyed out. 😢
Is it possible to share link of the sharepoint “site” with anyone outside organisation without signing-in at all?
Nope. Only to file. SharePoint sites does not support anonymous access.
Thanks but it doesn't work. The user clicks on the link in the email and then gets a screen that says, "We're sorry, but [external email address] can't be found in the [site domain name] directory." Can you please help?
Ask this user to use Incognito Mode and/or try to reinvite this user.
how can i restrict donwloading for external and guest users aside from the block download option? is there a more broad way?
Only way will be some DLP policy, but I did not found any example that address it globally.
@@szymonbochniak DLP specific policy or Information protection through labels?
Hi I need to share external user without any acc. If it's incognito the page want to open. How to do it
Anonmymous access is not supported in SharePoint Online :(
@@szymonbochniak But I was thinking sharing with anyone can allow anyone to access the site without having a Microsoft account?
Danke!
Thank you!
Panie Szymonie, jeśli można to mam pytanie odnośnie tego udostępniania. Mamy w organizacji włączone udostępnianie tylko dla istniejących gości. Gości zapraszam zakładając konta gościa przez Azure AD. W jaki sposób mogę sprawdzić kto ma dostęp i do czego? W witrynach widzę jedynie właścicieli i administratorów którzy są członkami naszej organizacji. Cała reszta trafia do grupy członkowie witryny, ale nie widzę nigdzie możliwości zobaczenia kto w tej grupie jest.
Po pierwsze zejdźmy z tego Pana ;)
Niestety nie ma dobrego raportu w pudełku. Tutaj znajduje się artykuł: office365atwork.com/sharepoint/sharepoint-online-logs/ jest tam raport external sharing. Wersje exportowana do Excel może być przydatna.
Sharegate ma fajny raport na temat external sharing.
Czy jest sposób żeby SP online zintegrować przez SSO z zewnetrzna aplikacja?
Generalnie z wykorzystaniem SPFx + oparcie uwierzytelniania appek poprzez Azure AD zapewnia dowolne integrowanie z appkami w Office 365.
@@szymonbochniak Dzieki! ale wtedy czy kazdy uzytkownik bedzie musial miec licencje officea zeby miec dostep do SP?
Dla pracowników firmy tak, nie opcji dostępu bez uwierzytelnienia.
Zewnętrzne osoby można zapraszać bez licencji, ale nie mogą to być pracownicy firmy.
I've tried everything even open up a ticket with Microsoft and I still can't understand why my visitors can not see my website.
What kind of error they get? Do they have at least LiveID accounts? Remember that there is no anonymous access to SharePoint site.
Sehr gut! Danke
Bitte schön!