Managing external identities to enable secure access for partners, customers, and other non-employees
Add each external person as a guest member of a Team when they must appear in Teams and receive chats and files; Teams does not provide a separate “trusted contact” list for this purpose.
Add the external user as a guest
A team owner can do this in the Teams desktop client:
- Open Teams and locate the relevant team.
- Select More options (…) beside the team name.
- Select Add member.
- Enter the external person’s complete email address.
- Select Add name as a guest, and then select Add.
- Ask the person to accept the welcome email. They may then need to select their profile picture in Teams and switch to your organization.
Guests must be added to at least one Team before guest functionality becomes available. After accepting the invitation, they can participate in chats and channels and access files shared with them. Provisioning can take several hours—Microsoft documents that it may take up to 12 hours.^1^ ^2^
For channel collaboration, add the guest to the appropriate Team and share the file in that Team’s channel. Guests can access only resources specifically shared with them.^3^
Why the file option is missing in an external chat
Teams has two different external collaboration models:
- External access lets users find, call, meet, and chat with users in another organization. It does not give those users access to your teams, channels, sites, or files.^4^
- Guest access creates a Microsoft Entra B2B guest account and supports teams, channels, chats, and file collaboration.^5^
In a normal external-access chat, external participants cannot attach or share files directly. That is why the attachment option may not appear.^6^
If converting the person to a guest is not appropriate, upload the document to OneDrive, grant that person access using an externally shareable link, and paste the link into the Teams chat. This requires your organization’s OneDrive or SharePoint external-sharing policy to permit that recipient.^7^
If Add member or Add as guest is unavailable
Ask the Microsoft 365 or Teams administrator to check the tenant configuration:
- Confirm that Teams guest access is enabled.
- Confirm that Microsoft Entra External ID and Microsoft 365 Groups permit guest invitations.
- Confirm that SharePoint and OneDrive external sharing permits the required sharing level.
- Run the guest-access diagnostic in the Microsoft 365 admin center.
Guest access depends on settings across Teams, Microsoft Entra ID, Microsoft 365 Groups, and SharePoint.^1^
For external chat without guest membership, the administrator should use Teams admin center → Users → External access and verify that both the organization-level setting and the user’s external-access policy allow communication. If domains are restricted, the partner’s domain must be allowed, and the partner organization must also permit communication with your domain.^4^
References
- Guest access in Microsoft Teams
- Add guests to a team in Microsoft Teams
- IT Admins - Overview of external collaboration options in Microsoft 365
- IT Admins - Manage external meetings and chat with people and organizations using Microsoft identities
- Use guest access and external access to collaborate with people outside your organization
- Add or invite people outside your org to a chat in Microsoft Teams | Microsoft Support
- Is possible to share files through normal chats (no teams or groups; chats 1:1) between tenants? - Microsoft Q&A