Overview of external collaboration options in Microsoft 365 (IT admins)

With Microsoft 365, your users can collaborate with people outside your organization in a variety of ways. Users can share files, invite guests to teams, have meetings with external participants, and chat with people from other organizations. This article covers the external collaboration options available and links to the content you need to configure each.

The following table shows the primary ways people from outside your organization can access your Microsoft 365 resources:

Activity	Account type	Default setting
Authenticated file and folder sharing	Guest account	Enabled
Site sharing	Guest account	Enabled
Team sharing	Guest account	Enabled
Shared channel in Teams	Existing Microsoft 365 external account	Disabled
External chat and meetings	Existing Microsoft 365 external account	Enabled
Anonymous meeting join	None	Enabled
Unauthenticated file and folder sharing	None	Enabled

People outside your organization do not have access unless a user in your organization initiates one of these activities. You can disable any of these settings if you don't want to allow that activity in your organization.

Document, site, and team sharing with guest accounts

Sharing documents, sites, and teams with people outside your organization uses guest accounts. Guest accounts are a type of account in Azure Active Directory that is managed through Azure AD B2B collaboration. They can be used to share resources in your organization with anyone who has an email address. You can manage guest accounts the same way you manage users in your organization. Guests do not require a license for most features of collaboration.

Guests can only access resources that you specifically share with them.

If the guest has a work or school account in another organization, or a Microsoft account, they can log in with their regular username and password. If they have a different type of account - such as a Gmail account - they can log in by using a one-time passcode that is sent to their email address.

With guests you can:

• Invite them to Microsoft 365 groups, teams, or SharePoint sites where they can collaborate with people in your organization.
• Share a single file or a folder with them which they can view or edit depending on the permissions you give them.

For information about how to plan for collaboration with guests in Microsoft 365, see the following references:

• Plan external collaboration
• Set up secure file sharing and collaboration with Microsoft Teams

For information about how to set up Microsoft 365 for collaboration with guests, see the following references:

• Collaborate with guests on a document
• Collaborate with guests in a site
• Collaborate with guests in a team

Shared channels

Shared channels are a type of Teams channel that allows you to share with people outside the team, including people in other Microsoft 365 organizations. While shared channels is turned on by default in Teams, external collaboration with shared channels is disabled by default. External collaboration with shared channels uses Azure AD B2B direct connect which allows you to add people from other Microsoft 365 organizations to Teams channels without the need for creating a guest account.

Shared channels have a particular advantage over guest accounts in that they do not require external participants to switch orgs in the Teams desktop client or log into your organization. They can remain logged in to their organization and access the channel directly.

Sharing channels with people outside your organization requires that your organization and the external organization both configure an organizational relationship in Azure AD B2B Direct Connect.

For information about how to set up Microsoft 365 for external collaboration with shared channels, see the following references:

• Plan external collaboration
• Shared channels in Microsoft Teams
• Collaborate with external participants in a channel

External chat and meetings

Users in your organization can chat, add users to meetings, and use audio or video conferencing in Teams with users in external Microsoft 365 organizations. By default, users in your organization can communicate in these ways with all other Microsoft 365 domains. People in other organizations can communicate in these ways with your users if they know the user's email address. You can allow or block specific domains or block all domains if you want to disable the feature.

You can also allow users in your organization to communicate with people from outside your organization who are using Teams accounts that are not managed by an organization, as well as Skype for Business (online and on-premises) and Skype users.

Guest accounts are not used as part of external chat and meetings. External participants remain signed in to their organization or to Skype and can communicate directly with people in your organization. They do not have access to your teams or channels.

For information about how to set up Microsoft 365 for external chat and meetings, see the following references:

• Use guest access and external access to collaborate with people outside your organization
• Manage external access in Microsoft Teams.

Anonymous meeting join

People from outside your organization can join meetings in the following ways:

• If they're logged in to your organization with a guest account, they join meetings as a guest.
• If they're logged in to a different organization with a work or school account, and both organizations have set up external access, they join meetings as an external participant.
• If they're not a guest or external participant, they must join meetings anonymously.

If the anonymous join setting is enabled for your organization, anonymous users can only join a meeting using a meeting link that has been shared with them (such as a link in the meeting invitation). They will be prompted to enter a display name of their choosing when joining the meeting anonymously. Depending on the lobby settings, the anonymous user may be automatically admitted to the meeting, or be added to a lobby where the meeting organizer (or meeting participants with the presenter role) can allow or deny access to the meeting.

It is not possible to verify the identity of anonymous users before, during or after the meeting.

You can control anonymous users' ability to join meetings at the organization level. If it's enabled for the organization, meeting organizers can control anonymous join through meeting policy settings.

For information about configuring anonymous join for meetings, see Manage anonymous participant access to Teams meetings.

Unauthenticated file and folder access

In Microsoft 365, files and folders in Teams, SharePoint, and OneDrive can be shared using unauthenticated - or Anyone - links. Anyone links give access to the shared item to anyone who has the link. Anyone links can be shared with others, giving those people access to the file or folder.

People using an Anyone link do not have to authenticate, and their access cannot be audited. File and folder owners can revoke access at any time by deleting the link.

Anyone links can't be used with files in a Teams shared channel site.

For information about working with anonymous file and folder sharing, see the following references:

• Manage sharing settings
• Best practices for sharing files and folders with unauthenticated users

Related topics

Intro to file collaboration in Microsoft 365, powered by SharePoint

File collaboration in SharePoint with Microsoft 365

Use guest access and external access to collaborate with people outside your organization

Limit guest sharing to specific organizations

Limit organizations where users can have guest accounts

Control who can bypass the meeting lobby in Microsoft Teams