Inside SharePoint we can enable and disable external sharing per site (whether classic, Team-connected or communication sites), as follow:

enter image description here

But inside MS Teams seems we can only have an org-wide setting for either enable/disable external and guest access for ALL the MS Teams, but we do not have control per MS Team? is my observation correct?

here is the MS Team setting to control external and guess access:

enter image description here

So let say we have 2 MS Teams; TeamsA & TeamsB. Then can we disable external sharing inside TeamsA while enable it inside TeamsB??

So in TeamsA you can not invite external users to any chat while you can do so in TeamsB? now in SharePoint we can disable external sharing for the related SharePoint site while enable inside the other site, so this is supported inside SharePoint but not inside MS Teams?

1 Answer 1


That's correct. Underlying Teams is the Microsoft 365 Group. Group allow list is global, i.e. you can allow any domain or specific domains to be added to any M365 Group. There is also a deny list if you want to go that route.

These are set in Azure AD at https://portal.azure.com/#blade/Microsoft_AAD_IAM/ActiveDirectoryMenuBlade/UserSettings.

SharePoint has separate settings. You can set the allow/deny list on a per-site basis. This means in theory someone could be a member of the M365 Group, but have no access to the SPO site files.


  • thanks for the reply.. so in short.. sharepoint support define external sharing per site, while office 365 group does NOT support defining external sharing per group?
    – John John
    Jan 12, 2021 at 20:44

Your Answer

By clicking “Post Your Answer”, you agree to our terms of service and acknowledge you have read our privacy policy.

Not the answer you're looking for? Browse other questions tagged or ask your own question.