Cross tenant synchronization

Question

Cross tenant synchronization

Divya K Nair 41

How B2B collboration in cross tenant access settings works? Whether we need to configure cross tenant synchronization to complete B2B collaboration in cross tenant access settings .After crosstenant synchronization whether users added only as members or can we change to guests in the usertype?

Main question: How can we complete B2B collboration in cross tenant access settings and how to check from target tenant. Can we add them as guests instead of becoming members{In the case of external organization}

Akshay-MSFT 17,931 Reputation points Microsoft Employee

2023-08-28T10:52:19.02+00:00

@Divya K Nair

Hope you got a chance to review the action plan suggested below. Please do let me know if you have any queries in the comments section. If you don't have any further queries and the suggestion works as per your business need. Please "Accept the answer(Yes)" and "share you feedback ". This will help us and others in the community as well.

Thanks,

Akshay Kaushik
JamesTran-MSFT 36,871 Reputation points Microsoft Employee

2023-08-29T16:30:32.47+00:00

@Divya K Nair

I wanted to check in and see if you had any other questions or if you were able to resolve this issue?

If you have any other questions, please let me know. Thank you for your time and patience throughout this issue.

If the information helped address your question, please Accept the answer. This will help us and also improve searchability for others in the community who might be researching similar information.

1 answer

Your answer

Akshay-MSFT 17,931 Reputation points Microsoft Employee

2023-08-28T10:52:19.02+00:00

@Divya K Nair

Hope you got a chance to review the action plan suggested below. Please do let me know if you have any queries in the comments section. If you don't have any further queries and the suggestion works as per your business need. Please "Accept the answer(Yes)" and "share you feedback ". This will help us and others in the community as well.

Thanks,

Akshay Kaushik
JamesTran-MSFT 36,871 Reputation points Microsoft Employee

2023-08-29T16:30:32.47+00:00

@Divya K Nair

I wanted to check in and see if you had any other questions or if you were able to resolve this issue?

If you have any other questions, please let me know. Thank you for your time and patience throughout this issue.

If the information helped address your question, please Accept the answer. This will help us and also improve searchability for others in the community who might be researching similar information.

Answer 1

Hi Divya,

Certainly, when it comes to Azure, B2B collaboration and cross-tenant access settings can involve Azure Active Directory (Azure AD) and its associated services. Let me directly address your questions regarding completing B2B collaboration in cross-tenant access settings and managing user roles in Azure AD, particularly whether you can add external users as guests instead of members.

Completing B2B Collaboration in Cross-Tenant Access Settings:

Invitation and Setup:

In Azure AD, an administrator from the source tenant initiates the B2B collaboration by inviting users from the target (external) tenant to access resources in their own tenant.
The source tenant admin sends invitations using the user's email address.

Acceptance and Access:

Users from the target (external) tenant receive the invitations and accept them. Once accepted, they can access specified resources in the source tenant.

Checking from Target Tenant:

Azure Portal:

In the Azure portal of the target (external) tenant, administrators can go to "Azure Active Directory" > "External Identities" > "B2B Settings" to view the list of invited users and their roles.

User Listing:

Within the "B2B Settings" section, you can see the list of guest users from the source tenant who have been invited and accepted the invitations. You can view their roles and their access levels.

Adding External Users as Guests Instead of Members:

Role Assignment:

When you invite users from an external organization to collaborate in Azure AD B2B, you have the flexibility to assign them as either "Guests" or "Members."

Role Implications:

"Guests" have limited access to resources in your tenant and are considered external collaborators.
"Members" have more extensive access and are treated as internal users of your organization.

Changing Roles:

If you initially invite an external user as a "Member," you can later change their role to "Guest" if necessary.

To summarize, completing B2B collaboration in cross-tenant access settings involves inviting users from an external organization to access resources in your tenant, which they can do once they accept the invitation. You can check the status of these invited users and their roles in the Azure portal under "B2B Settings."

Regarding the specific role assignment, you can choose to add external users as "Guests" instead of "Members" during the invitation process. Additionally, you can change a user's role from "Member" to "Guest" after they have been invited.

For detailed and up-to-date guidance, refer to Azure's official documentation on B2B collaboration and Azure Active Directory settings (https://docs.microsoft.com/en-us/azure/active-directory/b2b/ and https://docs.microsoft.com/en-us/azure/active-directory/).

I hope this helps with your query?

Divya K Nair 41 Reputation points

2023-08-21T04:46:16.4866667+00:00
Divya K Nair 41 Reputation points

2023-08-21T04:48:51.0233333+00:00

RevelinoB We can already select users for B2B collaboration.So is there any need to invite them separately.I dont understand that part
RevelinoB 3,440 Reputation points

2023-08-21T06:25:08.9733333+00:00

Hi Divya,

I apologize for any confusion in my previous response. If you already have the ability to select users for B2B collaboration, there might not be a need to invite them separately. Instead, you can directly designate which users from the external organization should have access to your resources. This approach simplifies the process, as you are giving the external organization the responsibility of choosing the users who will collaborate with your resources.

In this scenario:

The external organization will identify and select the users who need access to your resources.

The external organization will assign the appropriate roles (Guest or Member) to these users on their end.

Once the users have been designated and roles assigned, they will gain access to your resources based on the permissions associated with their roles.

This approach might be more efficient if you want to delegate the responsibility of user selection and role assignment to the external organization, streamlining the process on your end.

However, it's always a good practice to clearly communicate and coordinate with the external organization to ensure a smooth collaboration process and that the right users have the necessary access.

Please refer to the specific documentation provided by Azure for your tenant and scenario to ensure you are following the most appropriate process for your use case.

I hope this helps?
RevelinoB 3,440 Reputation points

2023-08-21T06:27:22.2966667+00:00

Hi Divya,

I apologize for any confusion in my previous responses. If you already have the ability to select users for B2B collaboration, there might not be a need to invite them separately. Instead, you can directly designate which users from the external organization should have access to your resources. This approach simplifies the process, as you are giving the external organization the responsibility of choosing the users who will collaborate with your resources.

In this scenario:

The external organization will identify and select the users who need access to your resources.

The external organization will assign the appropriate roles (Guest or Member) to these users on their end.

Once the users have been designated and roles assigned, they will gain access to your resources based on the permissions associated with their roles.

This approach might be more efficient if you want to delegate the responsibility of user selection and role assignment to the external organization, streamlining the process on your end.

However, it's always a good practice to clearly communicate and coordinate with the external organization to ensure a smooth collaboration process and that the right users have the necessary access.

Please refer to the specific documentation provided by Azure for your tenant and scenario to ensure you are following the most appropriate process for your use case.

I hope this helps?

Share via

Cross tenant synchronization

1 answer

Your answer