A Guide to Adding and Auditing Guest Access to Microsoft Teams
Microsoft recently announced support for proper guest access to Microsoft Teams. With this enabled you can add guests from other organizations to specific Teams. This of course takes a few steps to enable, and once enabled there are bunch of audit events which become interesting.
Normally when you try to add someone to a Team you see the following:
You can enable the option to invite a guest to a team, as follows:
Go into the Office 365 Admin Center and open Settings -> Services & add-ins
You will see a long list of options, find the one labelled Microsoft Teams and select it
This is the page which will appear:
You can see that the default license/settings that you will be changing are for Business & Enterprise licensed users. If you select that drop down list, you can choose guests instead:
You see that by default Guest access is disabled. To enable it, click on the slider and it will change from ‘off’ to ‘on’.
Then, when you add someone to a Team, you see this:
Notice the very subtle change in language indicating that you can now type an email address for people outside of your organization.
If you enter an email address which isn’t found in your organization you’ll see this:
And after adding, you will see your member list updated like this:
The person you’ve invited as a guest will get an email, which explains about Teams, and that contains a link. When they click on the link it will take them to a one time page giving consent information about people in the original tenant being able to see the guests display name and email address and that the original tenant may log information about access.
Inside the Teams client you then get a small drop down, which lets you switch between teams. When you first switch you get a short wizard that explains that you’ve joined as a guest.
Sometimes as an IT administrator you might want to know who added a guest to a team, and when that was done. That’s easy to do with our Audit & Compliance module. To find out more about the module, check our website.
Using our Audit & Compliance module, you can search for the activity ‘Added members to team’ and quickly see over a date range whether members were added to teams.
When a user is added to a Team you will see the following event:
When a guest is removed from a Team, you will see the following event:
When that user signs in you get the usual session started event, like this:
We are working on some pre-built reports, including showing you which Teams have had guests added to them, so that you can easily differentiate between internal people being added to a Team, and external people.
We’ll also be looking to produce a report which shows when guests sign into Teams so that you can review that too!
If you want top jump right in then login here using your Office 365 credentials. No credit card is required.