Azure – Preparing exam SC–300 – Implement an identity management solution – Implement and manage external identities – Manage external collaboration settings in Azure Active Directory – Part 7

Hi All,

Greetings for the day 🙂 LIFE IS BEAUTIFUL 🙂

Today, we will move further in preparation series for SC-300 exam. In this article we will discuss external collaboration settings in Azure Active Directory

If still didn’t got a chance to went through previous related articles – https://knowledge-junction.in/2021/03/19/azure-sc-300-identity-and-access-administrator-preparation-guide/  please have a look once. I am trying to keep as simple as possible 🙂

Take away from this article:

1. What is external user identity
2. Which are external user collaboration settings in Azure AD
3. Demo : Configuring external collaboration setting

Introduction :

1. External identities are the the users who are not part of our organizations like customers, vendors and other guest users
2. External users either can have either corporate or government-issued digital identity, or an unmanaged social identity like Google or Facebook, they can use their own credentials to sign in
3.  By default all users and guests in Azure AD can invite other guests irrespective of admin role is assigned or not
4. Azure AD allows us to restrict the operations can be performed by external users
5. By default very low permissions are for guest users. Guest users cant enumerate users, groups or other directory resources
6. External collaboration setting allows us turn on or off guest users invitations for different type of users in our tenant
7. With Azure AD B2B collaboration, tenant admin can set following permissions
   • Turn off invitations
   • Only admins and users in the Guest Inviter role can invite
   • Admins, the Guest Inviter role, and members can invite
   • All users, including guests, can invite

Demo : Configuring external collaboration setting

• Log in to Azure Portal as tenant administrator as

• Click on “Manage Azure Active Directory“, we will be redirected to “Active Directory Blade” menu as

• From left pane select “External Identities” as shown in above fig as, we will be redirected to “External Identities Getting Started” blade as shown in below fig

• From left pane click on “External collaboration settings” as shown in above fig, in right pane various “External collaboration settings” will be appeared as

• Please go through all the above settings and update as per the organization policy

Next article : In next article we will discuss how to invite external user to our tenant

Thanks for reading 🙂 If its worth at least reading once, kindly please like and share 🙂 SHARING IS CARING 🙂

Share In Teams:

Enjoy the beautiful life 🙂 Have a FUN 🙂 HAVE A SAFE LIFE 🙂 TAKE CARE 🙂