B2B External indentity

Question

Hey!

I have 2 tenants, for now simply refering to as tenant A and B in Azure.

for these 2 Tenants, a few DLP politics has been created with the purpose of blocking the users in sharing documents and teams chats that contains specifics wordings with external users.

Tenant A and B has a mutual B2B trust setup. Depsite this, when a user shares a document that contains one of the blocked words the document is restricted from shareing.

Could you assit in understanding why these users are being blocked as the users between Tenant A and B is preferbly to be viewed as internal for both sides if possible.

Answer 1

The Data Loss Prevention (DLP) policy takes effect on all specified locations unless specified otherwise while choosing where to apply the policy. Even though you have a B2B trust setup between Tenant A and Tenant B, DLP policy doesn't distinguish B2B users from external users. Any users that are not part of the tenant that the policy was created from are considered as external users. You might need to adjust your DLP to allow sharing documents and teams chats that contain those specific wordings to users in the other tenant.