Block some internal users to find guest users

Suolon Hu 1 Reputation point
2021-05-25T15:00:03.69+00:00

Hi,

I'm currently planning to setup Guest Access to our M365 tenant.

I am able to set it so that Guests invited into our tenant cannot look up other internal employees outside of the MS Team(s) that the guest is part of. Guest can only chat and lookup members that the MS Teams they are part of.

But what I want to do now is to restrict internal users from looking up Guests outside of the MS Team(s) that the internal users are part of.

Internal users can only chat and lookup Guests that are part of the same MS Teams they are part of.

Can this be done? If so, how?

Also, for the following setting:

Image found at my other post:
https://answers.microsoft.com/en-us/msoffice/forum/all/block-some-internal-users-to-find-guest-users/2d9e0d7f-778b-4aa2-b864-8d1af65cfb9f

For the most restrictive setting, does it mean Guests will not be able to lookup any users at all? even if they are part of the same MS Team?

Microsoft Teams
Microsoft Teams
A Microsoft customizable chat-based workspace.
8,653 questions
{count} votes

3 answers

Sort by: Most helpful
  1. Vasil Michev 90,876 Reputation points MVP
    2021-05-25T19:38:10.983+00:00

    They will be able to see some basic information for users they have Teams/Groups in common, but not lookup users otherwise. For example, if me (as a guest) and John are in the same Team, I can see his details. But if I (as a Guest) try to look up information on John's manager (or any other person I don't share a team/group with), I will get zero results.

    0 comments No comments

  2. Sharon Zhao-MSFT 25,126 Reputation points Microsoft Vendor
    2021-05-26T02:36:52.3+00:00

    @SuolonHu-1006,

    For the most restrictive setting, does it mean Guests will not be able to lookup any users at all? even if they are part of the same MS Team?

    No, it means guests can only access their own directory objects.
    For more information, please refer to this article.


    If the response is helpful, please click "Accept Answer" and upvote it.

    Note: Please follow the steps in our documentation to enable e-mail notifications if you want to receive the related email notification for this thread.

    0 comments No comments

  3. Vasil Michev 90,876 Reputation points MVP
    2021-05-27T07:06:20.743+00:00

    Those settings don't apply to internal users. If you want to restrict internal users visibility/ability to chat with others, use Information barriers: https://learn.microsoft.com/en-us/microsoftteams/information-barriers-in-teams