2

Actually, there are 4 places, not 3 to manage external collaboration and guest access in Teams. Azure Active Directory Settings. Guest Access Settings in Microsoft Teams. Guest Settings in Microsoft 365 Groups. SharePoint Sharing Settings for organization and sites So to avoid such confusion, you have first to understand Guest access Vs External access in ...


1

According to this Microsoft article, Global admins, SharePoint admins, and site admins all need to be assigned a SharePoint license. In my point of view, for safety consideration, external user cannot be global administrator.


1

I don't think it's possible to make guest users cannot see others else the file or the folder has been shared. When you share a folder with some guests, guests will be able to see other's names in the manage access panel.


1

That's correct. Underlying Teams is the Microsoft 365 Group. Group allow list is global, i.e. you can allow any domain or specific domains to be added to any M365 Group. There is also a deny list if you want to go that route. These are set in Azure AD at https://portal.azure.com/#blade/Microsoft_AAD_IAM/ActiveDirectoryMenuBlade/UserSettings. SharePoint has ...


1

Turns out, we can't assign licenses to the gest users via the Microsoft 365 admin portal. We have to do it via the Azure AD Admin Portal. How to assign licenses to a guest user: MS Docs Article Go to the Azure Active Directory admin portal In the navigation pane, select Users. On the Users | All Users (Preview) page, select Add filters. In the Pick a field ...


Only top voted, non community-wiki answers of a minimum length are eligible