0

I am a bit confused if there are any relation between the 2 sharing options:-

  1. Sharing on the tenant:-

enter image description here

  1. Sharing on the site collection:-

enter image description here

Is the sharing on the tenant covers only sharing to external users? while sharing on the site collection is applicable for both Internal and external? for example in my above settings, members can share files with internal users , but they can not do so for external? and is there any overlap between these settings? or each one covers separate area? is there some scenarios where one setting will override the other ?

Improve this question
2
  • 1
    tenant level is the whats and hows, the site collection level is who
    – Mike
    Mar 1, 2018 at 19:28
  • @Mike but is the tenant level the whats and hows for internal users also? as the tenant level settings seems for external users...
    – John John
    Mar 1, 2018 at 23:41

1 Answer 1

Reset to default
2

The tenant permissions supersede the site collection. If you don't share outside your organization at the tenant level, then the site collection setting will restrict who can be invited to members of your organization.

Improve this answer
9
  • 1
    i believe this is correct
    – Ken Hansen
    Mar 2, 2018 at 12:38
  • 1
    i don't know if you are familiar with the server permission structure, but the tenant permissions are more or less equivalent to the web application permissions. So you set them for the least restrictive option that is likely to be used and then use the site collection settings to manage each site. There shouldn't be many tenant admins as that is a level of control that should be highly restricted (there's just too much that can be changed at that level).
    – Ken Hansen
    Mar 2, 2018 at 14:54
  • 1
    The tenant settings are what is allowed, the site collection settings cannot override the tenant. Ex. 1 In the image you posted, only people from your organization can access any site collection on the tenant, the site collection has the sharing links set up to allow the link to be forwarded to anyone inside the organization (meaning anyone in the org can open the link). In this scenario, anonymous access at the site collection is the same thing b/c the Tenant will not allow access from outside the org.
    – Ken Hansen
    Mar 5, 2018 at 15:22
  • 1
    Ex. 2 If the tenant were set up to allow External Auth and anonymous links, the site collection settings will then be given the same choices as the tenant with regards to who can access the individual site collections. So a Collection1 could be restricted to internal and Collection2 could allow anonymous sharing. TL/DR The tenant needs top allow external if you want the option to exist on a Site Collection. External Sharing check out all 3 tabs.
    – Ken Hansen
    Mar 5, 2018 at 15:35
  • 1
    Correct. Tenant supercedes in regards to restriction. A site collection cannot ALLOW more than the tenant but it can RESTRICT more.
    – Ken Hansen
    Mar 5, 2018 at 18:59

Your Answer

By clicking “Post Your Answer”, you agree to our terms of service and acknowledge that you have read and understand our privacy policy and code of conduct.

Not the answer you're looking for? Browse other questions tagged or ask your own question.