I don't know if this had been answered already, but here's my case : I have a Sharepoint site and some subsites are meant to be shared with external people. However I don't want those external people to see the root site.
One of my colleagues created an AD account for this and we gave it a O365 license so it has access to the Sharepoint as well.
Since I gave read access to the "all users (membership)" account on the root site, this external account also has access to it, but I don't want this.
So my question is : Would it be better to get rid of the "all users (membership)" and build new groups with all the users who have access to the Sharepoint ? I'd say it's definitely better but I would need to update it every time a new person arrive in the company. I've started doing it for a few cases, but the update is what takes a lot of time.
We use Sharepoint Online.
Any suggestion is gladly welcome. Thanks !