Microsoft Teams security with external users

Question

Hi All,

I wanted to get some information on security measures with MS Teams and external parties.

More specifically what safe guards are in place when an external user in a team has their account compromised? 

Thanks,

Jamie

Moved from: Office/ More Office apps / Windows 10 / Unknown/other

Answer 1

Hi JAMie RobinSON1,

Thanks for the clarification. Based on your request, I recommend you change settings to let the external users cannot modify channels in your Teams.(https://support.office.com/en-us/article/set-guest-permissions-in-teams-4756c468-2746-4bfd-a582-736d55fcc169)

In addition, you can also create read-only files in Teams, so the specific members in Teams cannot modify any files there based on your needs.(https://support.office.com/en-ie/article/create-read-only-files-for-class-teams-0e7791d7-8c9c-4749-9bca-984289477988)

If you still concern about this problem and want to set security methods for the external parties, since they are managed by their admin or mail provider, we recommend you let the external parties contact their admin/mail provider to set this method for them. 

Thanks again for your understanding.

Best Regards,

Betty

Answer 2

Hi Betty,

Thank you for your response.

The scenario I'm thinking of is in a MS Teams environment where we have both internal employees and external parties in the Team sharing, updating and communicating on information sensitive documents. 

We have multi-factor authentication in place so the likelihood of a password hacking incident is reduced on our end. However we can't force internals to have the same security measures in place. If an external member of the team has their email compromised the hacker would in turn have access to all documents and information in our team.

Is there anything that can be done to help avid this situation arising?

Regards,

Jamie

Answer 3

Hi JAMie RobinSON1,

It is my pleasure to help you here. Based on your description, I understand that you would like to know the security method for external users when they are compromises in Teams.

If so, as far as I know, your account is controlled and owned by yourself, Microsoft doesn't use your data other than offering you the service that you subscribe to, then may I know what you concern about exactly? About the security and compliance in Microsoft Teams, you can click following link for a reference:

https://docs.microsoft.com/en-us/microsoftteams/security-compliance-overview

If there is any misunderstanding, please feel free to correct me and offer me more details for further analysis, such as an example.

Thanks for your understanding and cooperation.

Best Regards,

Betty