How is it possible for guest to invite other guests?

Question

How is it possible for guest to invite other guests?

Rene 20

Hello,

I'm trying to fully understand the behaviour of the External Collaboration / Guest Invite settings with "Member users and users assigned to specific admin roles can invite guest users including guests with member permissions".

How is it possible for a guest to invite another guest when only team owners can invite guests to a team and guests cannot be owners?

IIS_2602

JimmyYang-MSFT 58,756 Reputation points Moderator

2023-12-05T02:37:16.4366667+00:00

@Rene

We will check it later.

Answer accepted by question author

0 additional answers

Your answer

JimmyYang-MSFT 58,756 Reputation points Moderator

2023-12-05T02:37:16.4366667+00:00

@Rene

We will check it later.

Answer 1

Vasil Michev 124.4K MVP Volunteer Moderator

Selecting this option does NOT allow guests to invite other guests. Only the first option, Anyone in the organization can invite guest users including guests and non-admins (most inclusive), allows that. Refer to the official documentation for more details, including how the invitation process works: https://learn.microsoft.com/en-us/entra/external-id/external-collaboration-settings-configure

Do note that those settings are not specific to Teams, there are many other methods which can be used to invite guests. A guest added to another tenant can for example access the Entra ID portal and use the Invite external user functionality therein, if allowed by the tenant's configuration.

Rene 20 Reputation points

2023-12-05T09:03:45.4433333+00:00

Vasil,

Thanks for your reply. If, then, Anyone in the organization can invite guest users including guests and non-admins (most inclusive) is selected - how can guests invite guests to a team as only owners can add members to a team and guests cannot be owners.

Rene
Deleted

This comment has been deleted due to a violation of our Code of Conduct. The comment was manually reported or identified through automated detection before action was taken. Please refer to our Code of Conduct for more information.
Rene 20 Reputation points

2023-12-05T09:06:51.04+00:00

Vasil - I only just re-read your answer and saw “Do note that those settings are not specific to Teams, there are many other methods which can be used to invite guests. A guest added to another tenant can for example access the Entra ID portal and use the Invite external user functionality therein, if allowed by the tenant's configuration.” In this case, can a guest of the same tenant invite another guest? I’m presuming an admin role would need to be assigned to that guest user as well.
JimmyYang-MSFT 58,756 Reputation points Moderator

2023-12-05T09:15:07.0066667+00:00

@Rene

how can guests invite guests to a team as only owners can add members to a team and guests cannot be owners.

Yes, you're right. Only members can be owners of a group, so you must first add a user as member before adding it as an owner. Guest users cannot be an owner of groups, even if the users are members of the groups.
Vasil Michev 124.4K Reputation points MVP Volunteer Moderator

2023-12-05T09:23:25.6833333+00:00

No, you don't need an admin role if the Anyone in the organization can invite guest users including guests and non-admins (most inclusive) option is selected. Unless you are blocking access to the Entra ID/Azure AD blade, the guest user can just open it and use the Add > User > Invite external user menu on the Overview page.

It will not work in Teams, as you have pointed out, but the setting does not apply to Teams only, it's a generic directory-wide setting. In this context, Teams is just one of the applications that support inviting guests, the fact that you cannot invite guests via Teams does not mean that you cannot use other methods.
JimmyYang-MSFT 58,756 Reputation points Moderator

2023-12-05T09:26:32.8266667+00:00

@Rene

I found more clues. You could create a security group for the users who will be allowed to invite guests. Be sure to configure this group to allow a Microsoft Entra role, and then assign it the Guest inviter role. For more details, you could refer to:

https://learn.microsoft.com/en-us/microsoft-365/solutions/limit-who-can-invite-guests?view=o365-worldwide#create-a-security-group-for-people-allowed-to-invite-guests
Rene 20 Reputation points

2023-12-05T09:31:49.3033333+00:00

Thanks Vasil and JimmyYang. You’ve provided some great answers. I’ll go head and mark it as Answered :)

Share via

How is it possible for guest to invite other guests?

0 additional answers

Your answer