Slides for my session on external data sharing in Office 365 for the Experts Live Netherlands 2018 conference. Topics include sharing in SharePoint, Teams, how to govern sharing settings, invitations, and leveraging Azure AD B2B

1. OFFICE365
Extern delen van
data in Office 365
alles wat je al had moeten weten,
maar nooit durfde vragen
Maarten Eekels
@maarteneekels

2. OFFICE365
Contact
@maarteneekels
meekels@portiva.nl
www.eekels.net

3. OFFICE365
Agenda
• External sharing options in Office 365
• Guest link expiration
• The sharing experience
• External users in Office 365 Groups
and Teams
• Azure AD B2B
• Conditional access

4. OFFICE365
Sharing settings
• Tenant level / Azure AD level
• SharePoint Admin level
• Site Collection level
• Site level
• Default sharing link type

5. OFFICE365
Sharing a SharePoint site
• Site owner / Administrator
■ Give any permission level
• Site member
■ No option available to give
specific permission level,
same level as Members group

6. OFFICE365
Sharing a document or folder
• Anonymous vs Signed-in
• View vs. Edit
• Expiration of
anonymous links
• You can always remove
permissions/links

7. OFFICE365OFFICE365
DEMO

8. OFFICE365
The sharing experience
• Microsoft Account vs.
Organizational Account
• The link in the email points
to the site where the
security groups originates

9. OFFICE365OFFICE365
DEMO

10. OFFICE365
Office 365 Groups
versus

11. OFFICE365
Microsoft Teams

12. OFFICE365
External users in Teams
Sharing type can only be set through PowerShell
$template = Get-AzureADDirectorySettingTemplate | ? {$_.displayname -eq
"group.unified.guest"}
$settingsCopy = $template.CreateDirectorySetting()
$settingsCopy["AllowToAddGuests"]=$False
$groupID = (Get-AzureADGroup -SearchString “<your group name").ObjectId
New-AzureADObjectSetting -TargetType Groups -TargetObjectId $groupID -
DirectorySetting $settingsCopy
• Guest users can only be Members
• Profile info of internal users is trimmed

13. OFFICE365OFFICE365
DEMO

14. OFFICE365
Azure AD B2B
• Manual add users in the new Azure portal
• Bulk add users with CSV import in the classic
Azure portal or with PowerShell
• Programmatically add users with Graph API
• You can add invited users to a security group,
which you can add to a SharePoint group
• Invited users are added to AD instantly

15. OFFICE365
Invitation API
https://graph.microsoft.com/beta/invitations / New-AzureADMSInvitation
{
"invitedUserDisplayName": "Satya Nadella",
"invitedUserEmailAddress": “endboss@outlook.com",
"sendInvitationMessage": true,
"invitedUserMessageInfo": {
"customizedMessageBody": "Hello Satya, let's collaborate!“ },
"inviteRedirectUrl": "https://www.microsoft.com"
}

16. OFFICE365OFFICE365
DEMO

17. OFFICE365
Conditional access
• SharePoint Admin Center and
OneDrive Admin Center set the
same settings
• For non-compliant device
policies, you need Intune
• These policies apply both to
internal and external users!

18. OFFICE365OFFICE365
DEMO

19. OFFICE365
One last tip
The ability to search for existing guest users in the
SharePoint Online people picker is OFF by default
Set-SPOTenant / Set-SPOSite –
ShowPeoplePickerSuggestionsForGuestUsers $true

20. OFFICE365
Do you want to gain more
knowledge about Microsoft
technology?
The Future Ready Skills program
offers online courseware, online
labs, live Q&A’s and expert
sessions, so you can acquire
your official Microsoft Certificate
in the most efficient way.
For more information:
aka.ms/frsblog
FUTURE READY
SKILLS

21. OFFICE365OFFICE365
http://feedback.expertslive.nl/

22. OFFICE365
Next session: 11:30 – 12:30
Configuring a cloud PBX
with Office 365 in real-
world scenarios
Ralph Eckhard