SharePoint Stack Exchange is a question and answer site for SharePoint enthusiasts. It only takes a minute to sign up.
Sign up to join this community
I have a teams site for external users, with a library where they can download reports. They only need 'read' permissions on this site.
Do I add them to the Sharepoint (OOTB) visitors group? Or add them to the existing M365 site's security group, as visitors? Or do I create a separate security group for them in M365?
You can add them to the SharePoint visitors group or create a group in site and grant the group read permission. What matters is not what group they are but the permission levels they have. Groups are just a way to make it easier to manage users, by putting users with the same permission levels in a group and giving them the same permissions.
