question

Mark-7334 avatar image
0 Votes"
Mark-7334 asked

how to restrict deafult guest user to edit his own profile on azure

Hi all, is there any possible to avoid my default guest user to edit his own profile like username , password etc...
or else i want to add user as guest that user can't edit his profile.

azure-active-directory
5 |1600 characters needed characters left characters exceeded

Up to 10 attachments (including images) can be used with a maximum of 3.0 MiB each and 30.0 MiB total.

1 Answer

michev avatar image
0 Votes"
michev answered michev commented

Guests cannot change their username and password is not relevant in the resource tenant (credentials are managed in the "home" tenant). You can restrict them from performing other actions, seeing group membership, etc. Read here: https://docs.microsoft.com/en-us/azure/active-directory/enterprise-users/users-restrict-guest-permissions

· 2
5 |1600 characters needed characters left characters exceeded

Up to 10 attachments (including images) can be used with a maximum of 3.0 MiB each and 30.0 MiB total.

Hi @michev thanks for ur replay, here i have create an new guest user on my azure the user able to change his password. And also i refereed the link https://docs.microsoft.com/en-us/azure/active-directory/enterprise-users/users-restrict-guest-permissions.

In this link "Guest user access is restricted to properties and memberships of their own directory objects" these option is enabled all the guest user have not able to see the other user profile some thing like that my problem is not that i enabled the option but still the guest user is able to change its password.

And you said we make some action group membership we able to block user to change its password??

0 Votes 0 ·

You cannot block anyone from changing their own password in Azure AD/O365. What I was saying above is that it doesnt really matter if a Guest can change his password in your tenant, as they still need to use the credentials from their home tenant to login.

0 Votes 0 ·