Make users without teams license invisible in teams

Question

Make users without teams license invisible in teams

AndAuf 26

to use our Azure VirtualDesktop/App, I need to create a local user which I can then permit to access the virtualized windows system. Our VDI is set up for external users, so we pay per use. The users in question only have the AADP1 license to ensure their logins is CA/MFA protected. No Office/Teams license.

Of course the user Jon Doe gets a UPN which is ******@extern.contoso.com. But if someone now searches for doe in teams, this unlicensed account will be found and written to. Which of course will never reach Jon, as this is not his teams-account.

How can I block these users from being found in teams?

And please don't tell me to buy E5 licenses for them and use data boundaries...

1 answer

Your answer

Answer 1

Ran Hou-MSFT 7,585 Microsoft External Staff

@AndAuf

Based on my research, there are two options for limiting who users can see when they search the directory in Teams:

If using either option, you must turn on search by name in the Teams admin center, select Teams > Teams Setting > Search Ny Name > Scope directory search using an Exchange address book policy.

333

If the answer is helpful, please click "Accept Answer" and kindly upvote it. If you have extra questions about this answer, please click "Comment".

Note: Please follow the steps in our documentation to enable e-mail notifications if you want to receive the related email notification for this thread.

AndAuf 26 Reputation points

2023-08-01T15:45:25.93+00:00

barriers require E5 licenses. I wont buy E5 licenses for external users I only have to create to give them external access to our AzureVDI. Especially as this user shouldnt even be liste by default, if he does not have a teams license. It is an account in my tenant and my tenant knows, this users does not have a teams license. So this user must not be shown in teams.

As this user has no EXO-license and therefore no mailbox, it doesn't exist in address book.
Ran Hou-MSFT 7,585 Reputation points Microsoft External Staff

2023-08-02T06:25:31.69+00:00

@AndAuf

This feature doesn't seem to be implemented.

Meanwhile, to get this feature more quickly, we recommend you give the feedback in Teams UserVoice. Many features of our current products are designed and upgraded based on customers’ feedback. With requirements like this increase, the problem may well be released in the future. Thanks for your understanding and support.
AndAuf 26 Reputation points

2023-08-02T06:38:10.23+00:00

what do you mean by "not implemented"? How are users supposed to see, if they search for "doe", that this user will NEVER answer them, as it doesnt even have a Teams license. That's not a feature, it is a bug, that this user is even visible.
Ran Hou-MSFT 7,585 Reputation points Microsoft External Staff

2023-08-02T09:40:41.9+00:00

@AndAuf

The information barrier method is required for licenses and permissions. According to official documentation, there are no license requirements for the address book policy method in Exchange Online, but search by name must be enabled in the Teams admin center. Once enabled, wait patiently for it to take effect.

For more details, you may refer to the article.
AndAuf 26 Reputation points

2023-08-02T11:34:29.52+00:00

the user is NOT in EXO and therefore NOT in address book.

I don't want to "limit" anything. The user has no Teams license and simply must not be seen in Teams.
Ran Hou-MSFT 7,585 Reputation points Microsoft External Staff

2023-08-03T09:44:58.7766667+00:00

@AndAuf

No other solution has been found now. Hope it will be improved later.

Share via

Make users without teams license invisible in teams

1 answer

Your answer