After reading some great blog content last night from a few people and Microsoft.

Randy Chapman’s done a great post here and seems i haven’t fully setup my tenant for guests, perhaps this is why my invites are not appearing in guests mailbox and could be some of issues yesterday. Following Randy’s blog i actually need to enable guest access on my tenant which i didn’t know.

http://lynciverse.blogspot.co.uk/2017/09/hoe-to-enable-external-guest-access-in.html?m=1

Also noticed tweet from Jeremy Thake @jthake showing the importance of enabling guests on tenant. https://twitter.com/jthake/status/907693323845955584/photo/1

In summary Today

• Needed to enable guests on my tenant as missed this in the excitement. lol
• Used Teams client as guest more today – Im still new to Teams and number 1 is i never use the reply in threads so always start new ones.
• Played about with Switching and best client i think so far is the web client for switching
• Tried Guest Access on IOS team mobile client and although ive seen tweets that say it works i just cant see to use it. probably me.
• Learnt more around guests and guest capabilities in Teams.

Hope this little recap of Teams helps someone.lol

Microsoft Support Article detailing Guest access in Microsoft Teams and more setup details.

https://support.office.com/en-us/article/Guest-access-in-Microsoft-Teams-bd4cdeec-4044-4b4b-9df1-beb139013a3f?ui=en-US&rs=en-US&ad=US#ID0EAACAAA=Use

Some Summary Points from Microsoft article I’ve found from Reading

• Guest access is included with all Office 365 Business Premium, Office 365 Enterprise, and Office 365 Education subscriptions. No additional Office 365 license is necessary.
• Microsoft Teams guest access is a tenant-level setting and is turned off by default. Admins can manage guest access via the Office 365 admin center. ( I didnt do this before)
• Note: The Microsoft Teams guest access tenant setting only prevents guest sign-in. Team owners will be able to invite new guests and add existing directory guest users to their respective teams.  As a reminder, Microsoft Teams always honor Azure Active Directory external settings to allow or prevent guest user addition to the tenant.
• In addition, you can use the Azure Active Directory portal to manage guests and their access to Office 365 and Microsoft Teams resources.
• Microsoft Teams relies on SharePoint Online and OneDrive for Business to store files and documents for channels and chat conversations. In addition, Microsoft Teams relies on Office 365 groups to store teams’ memberships and other properties such as team data classification settings.

 

To enable the full Microsoft Teams guest access experience, Office 365 admins need to select On for the following settings: (Another thing i didnt do)

• In SharePoint Online: Only allow sharing with external users already in the directory

  For more information, see Manage external sharing for your SharePoint Online environment.

• In Office 365 groups: Let group owners add people outside the organization to groups

  For more information, see Control guest access to Microsoft Teams.

Let check my Tenant shall we

Sign into Office 365 tenant as admin

Go settings > Services and add-ins

Select Microsoft Teams

Under Settings by user/licence type from drop down select “Guest”

Toggle “Turn Microsoft Teams on or off for all users of this type” to ON

and Click SAVE

Now lets check SharePoint Online

• In SharePoint Online: Only allow sharing with external users already in the directory

Some SharePoint notes from

https://support.office.com/en-us/article/Manage-external-sharing-for-your-SharePoint-Online-environment-c8a462eb-0723-4b0b-8d0a-70feafe4be85

• Note that external sharing is turned on by default for your entire SharePoint Online environment and the site collections in it.
• SharePoint Online has both global (tenant-wide) and site collection settings for external sharing. The tenant-level settings override any settings at the site collection level.

we need to enable

Select Sharing Tab

I couldn’t find the setting that was referenced in the documentation

In SharePoint Online: Only allow sharing with external users already in the directory

Im assuming the setting highlighted below is the one and it is mentioned its enabled by default so ill leave this alone.

Next need to check Groups Settings

In Office 365 groups: Let group owners add people outside the organization to groups

back to Settings > Services & add-ins

this time we need groups

Mine is on be default so nothing to do here.

Turn on or off the Sharing option for Office 365

Seems another one to check but its enabled by default but lets check it out

Under Sharing

Now its seems im all good to go on the backend.

A bit more on Guests

Viewing Guest Users seem we can do this from Office 365 Portal

Under Users > Guest users

Yep there’s my Guest

Cant change photo as not internal user

Inviting Guests and invite multiples with AAD B2B preview

Invite guest users

A team owner or an Office 365 admin can invite a guest to a team on an individual basis. However, admins can’t use the Office 365 admin center or the Azure Active Directory portal to invite multiple guests in one action. To invite guests centrally, consider using the Azure Active Directory B2B collaboration preview. For more information, see About the Azure AD B2B collaboration preview. After watching video on this it seems Azure AD B2B is GA now.

Editing Guest information

Currently, you can’t edit guest information from the Office 365 admin center or the Exchange admin center. To edit guest accounts (such as display name or profile photo), go to your Azure Active Directory portal. For more information, see Understanding Office 365 Identity and Azure Active Directory.

This is where i updated the name yesterday so can confirm it works.

Lets learn some more stuff user side.

Great article below on the user experience of being a guest

https://support.office.com/en-us/article/Guest-access-in-Microsoft-Teams-bd4cdeec-4044-4b4b-9df1-beb139013a3f?ui=en-US&rs=en-US&ad=US#bkmk_controlguestaccess

Great summary of steps required.

Here’s how a guest becomes a member of a team:

• Step 1 A team owner or an Office 365 admin adds a guest to a team.

• Step 2 The Office 365 admin or the team owner can manage a guest’s capabilities as necessary. For example, allowing a guest to add or delete channels or disabling access to files.

• Step 3 The guest receives a welcome email from the team owner, inviting them to join the team. After accepting the invitation, the guest can participate in teams and channels, receive and respond to channel messages, access files in channels, and participate in chat. While using Microsoft Teams, a combination of text and icons gives all team members clear indication of guest participation in a team. For more details, see What the guest experience is like.

Guests can leave the team at any time via Microsoft Teams web and desktop clients. For details, see How do I leave a team?

The following table compares the Microsoft Teams functionality available for an organization’s team members to the functionality available for a guest user on the team.

also great table as well

 

FAQs some interesting ones

Who can be added as a guest user?

Only users who have an email address corresponding to an Azure Active Directory or Office 365 work or school account can be added as a guest user.

Why does a user get the message "Contact your administrator" when they try to add a guest to their team? ( I was getting this yesterday)

As the Office 365 admin, you must enable the guest feature before you or your organization’s users (specifically, team owners) can add guests. When a user sees that message, it’s likely that the guest feature hasn’t been enabled.

How long does it take until the guest user settings take effect in the Office 365 organization?

The guest settings are set in Azure Active Directory. It takes 2 hours to 24 hours for the changes to be effective across your Office 365 organization.