I have a teams site for external users, with a library where they can download reports. They only need 'read' permissions on this site.
Do I add them to the Sharepoint (OOTB) visitors group? Or add them to the existing M365 site's security group, as visitors? Or do I create a separate security group for them in M365?