Only Team Owners Can Invite Guests

Question

Hello Teams Community,

Please i need help on this issue.

I only want Team Owners to be able to invite [external] guests to their Teams, and, according to: https://support.microsoft.com/en-us/office/add-guests-to-a-team-in-teams-fccb4fa6-f864-4508-bdde-256e7384a14f, this is the default by-design behavior.

However, in Azure AD ] External Identities ] External collaboration settings, the relevant choices are:

• 'Members' (or admin role) can invite guests

OR - Only admin role can invite guests Neither of these options are consistent with the apparent 'by-design' behaviour linked above.

(1) Please advise which is correct. (

2) To meet my requirement and assuming all members can invite guests, is the best workaround to explicitly add the Guest Inviter to each Team Owner and select the 'Only admin role can invite guests' option? 

Answer 1

Hi @IBN ，

(1) Please advise which is correct. (

Based on my understanding, both of the statements are true.

The link of the document you shared is for Teams only, which means, from the perspective of Teams, only Team owner has the capability of adding guests to a team in Teams.

As regards to the options you see in Azure AD ] External Identities ] External collaboration setting, they are on the basis of Azure AD. And the "member users" mentioned there refers to the native members of the tenant(see this link for more details about the definition), rather than the team members in a team in Teams. Actually aside from Teams, guest users can be invited to access other resources as well, for instance, users in your tenant can invite guest users to their apps, see this document.

2) To meet my requirement and assuming all members can invite guests, is the best workaround to explicitly add the Guest Inviter to each Team Owner and select the 'Only admin role can invite guests' option?

By " only want Team Owners to be able to invite [external] guests to their Teams, ", do you mean you want to prevent a team member from adding a guest user into the team? If this is the case, you can just keep the default settings in Azure AD, as by design, in Teams, only team members can add guest users into the team.

---

If the answer is helpful, please click "Accept Answer" and kindly upvote it. If you have extra questions about this answer, please click "Comment".
Note: Please follow the steps in our documentation to enable e-mail notifications if you want to receive the related email notification for this thread.

Answer 2

I think you can add these setting in https://admin.teams.microsoft.com/dashboard