Manage external collaboration in Microsoft 365
The Microsoft 365 admin center has organization-level settings for sharing and for Microsoft 365 Groups.
External sharing settings in Microsoft 365
Navigation: Microsoft 365 admin center> Settings > Org settings > Security & privacy tab > Sharing
| Setting | Default | Description |
|---|---|---|
| Let users add new guests to the organization | On | When set to Yes, Microsoft Entra members can invite guests via Microsoft Entra ID; when set to No, they can't. When set to Yes, Microsoft 365 Group members can invite guests with owner approval; when set to No, Microsoft 365 Group members can invite guests with owner approval but owners must be global administrators to approve. Note that Members can invite refers to members in Microsoft Entra ID (as opposed to guests) and not to site or group members in Microsoft 365. This is identical to the Members can invite setting in Microsoft Entra Organizational relationships settings. |
Microsoft 365 Groups settings
Navigation: Microsoft 365 admin center> Settings > Org settings > Microsoft 365 Groups
| Setting | Default | Description |
|---|---|---|
| Let group members outside your organization access group content | On | When set to On, guests can access groups content; when set to Off, they can't. This setting should be On for any scenario where guests are interacting with Microsoft 365 Groups or Teams. |
| Let group owners add people outside your organization to groups | On | When On, Owners of Microsoft 365 Groups or Teams can invite new guests to the group. When Off, owners can only invite guests who are already in the directory. |
These settings are at the organization level. See Create settings for a specific group for information about how to change these settings at the group level by using PowerShell.