I have a Site Collection in our SharePoint online tenant. I wanted to give Read permission for everybody in our organization. so in Site Permissions I Clicked on Grant Permissions and typed NT AUTHORITY\authenticated users and clicked ok. However nobody has access to the site collection yet. I thought I have to add NT AUTHORITY\authenticated users to the members group but still nobody has access to the Site Collection.

  • Are you using ADFS for authenticating users?
    – Aanchal
    May 27, 2014 at 8:21
  • I don't know I have to ask. I will be back. Does it matter?
    – Medes
    May 27, 2014 at 8:22
  • 1
    NT AUTHORITY\authenticated users will only work on-prem. If you type in "All" you should get suggestions to the correct claims user token for all users, for example "All authenticated users" :) May 27, 2014 at 8:23
  • 2
    I got two suggestions, All users(windows) and All users(Membership). which one is right?
    – Medes
    May 27, 2014 at 8:25
  • 1
    Probably membership, depends on your setup with authentication. Also this quote " put in a support ticket with Microsoft and found out that our users (who all are external to our network and use Windows Live IDs to authenticate) cannot be included in any kind of "all users" authentication. I have to enter them all individually into the Visitors group." from community.office365.com/en-us/f/154/t/79019.aspx seems to indicate that you can not add external users in any "All...", just a side note May 27, 2014 at 8:28

2 Answers 2


You can provide permissions to following groups :

  1. All Authenticated Users: All user accounts which can be recognized by SharePoint Online, both for internal and external.

  2. All Users (Windows) : User accounts from Federated domains.

  3. enter image description hereAll Users (membership): All user accounts from Office 365 Online Services.

  • 4
    To add to this, there's also 'Everyone' and 'Everyone except external users'
    – wjervis
    May 27, 2014 at 12:17

Everyone was what worked for me

EDIT Everyone is a default group that contains all authenticated and guest users that can connect to your network.

enter image description here

  • 1
    Can you please elaborate your answer, with details on how your problem got solved..
    – Asad Refai
    Sep 5, 2015 at 17:19
  • can we do this in a event receiver in sp2013? i tried with nt authority \authenticated user, but ti didnt work. please let me know everyone will work
    – samolpp2
    Dec 22, 2016 at 18:07

Your Answer

By clicking “Post Your Answer”, you agree to our terms of service and acknowledge you have read our privacy policy.

Not the answer you're looking for? Browse other questions tagged or ask your own question.