This document provides a comprehensive guide on external sharing in SharePoint, detailing how to share sites, documents, and folders with external users who do not have Office 365 licenses. It outlines the steps for configuring external sharing at tenant, site collection, and site levels, as well as the permissions associated with external users and best practices for managing these users. Additional information is provided on how external users experience SharePoint, including account options and steps for accessing shared content.
Overview of SharePoint External Sharing by Gregory Zelfond, highlighting the agenda and role.
Definition and permission details of external users in SharePoint. Explains sharing capabilities and roles.
Steps to share a whole site with external users and permissions assigned depending on role.
Instructions on sharing documents and folders, including anonymous links and permission levels.
Steps for external users to access shared sites/documents, including account authentication options.Three levels of external sharing configuration: Tenant, Site Collection, and Site Level settings.
Steps to remove external users from sites, documents, and Tenant level through SharePoint Admin settings.Conclusion with contact information for SharePoint assistance, resources, and acknowledgments.
sharepointmaven.com @gregoryzelfondsharepointmaven.com @gregoryzelfond
AboutMe
Gregory Zelfond
10+ years of experience with SharePoint
Huge SharePoint Advocate, blogger
Love to solve business problems using code-free, out of
the box SharePoint configurations
Owner of SharePoint Maven (sharepointmaven.com)
sharepointmaven.com @gregoryzelfondsharepointmaven.com @gregoryzelfond
Whois an External User in SharePoint?
User who does not have an Office 365 License, but
who has been given access to a site or document in
your SharePoint environment
Not an employee of the organization
Usually a vendor, client, contractor, any 3rd party
sharepointmaven.com @gregoryzelfondsharepointmaven.com @gregoryzelfond
Whatpermission will the external user get?
If shared by Site Owner
(user with Full Control)
Any permission level can be
assigned by Site Owner (Read,
Contribute, Full Control)
If shared by Site Members
Same permission level as already
assigned to the Site Members
Group
- Contribute Contribute
- Read Read
13.
sharepointmaven.com @gregoryzelfondsharepointmaven.com @gregoryzelfond
Differencebetween external and regular user
Once you share your SharePoint Site with an external user,
there is very little difference between what you can do and
what an external user can do. This means that:
External Users can:
– Add/Edit/Delete documents, tasks, events, etc.
– Access all SharePoint Site Contents (Pages & Web Parts)
– Setup Alerts
– Share your SharePoint site with other external users
External Users cannot:
– Have their own OneDrive personal account
– Have their own User Profile/Delve page
sharepointmaven.com @gregoryzelfondsharepointmaven.com @gregoryzelfond
AnonymousLinks
Unlike Sites, individual documents can be
shared anonymously (without requiring
external user to login)
Depends on how SharePoint External Sharing
was configured by your IT Administrators
PLEASE DO NOT SHARE WITH ANONYMOUS LINKS FROM
SHAREPOINT - USE ONEDRIVE FOR THIS INSTEAD!
20.
sharepointmaven.com @gregoryzelfondsharepointmaven.com @gregoryzelfond
Whatactually happens in the background…
Once you share your document or folder with an
External User, the user will only get access to the
specific file or folder you shared. User will not be able
to access other files on the site, even in the same
document library. However, if you shared a folder, all of
its contents and subfolders will be shared!!!
Can Edit – User Can Edit Document Online
View – User can read/download document, but can’t
edit
sharepointmaven.com @gregoryzelfondsharepointmaven.com @gregoryzelfond
Differencebetween accounts
Microsoft account
– Any Microsoft domain account (For example:
user@hotmail.com, user@live.com, user@outlook.com)
– You can login with any personal accounts above
Organizational Account
– Some other Office 365 account
– If you have Company A Office 365 account, you can access
Company B SharePoint sites with your Company A Office
365 credentials (of course if site/documents have been
shared with you)
sharepointmaven.com @gregoryzelfondsharepointmaven.com @gregoryzelfond
Hereis the fun part…
There are 3 places where you
need to configure External Sharing
Tenant Level – settings control external sharing for
ALL site collections
Site Collection Level – settings control external
sharing for specific site collection
Site Level – settings control (external) sharing for
specific site
sharepointmaven.com @gregoryzelfondsharepointmaven.com @gregoryzelfond
SiteLevel, cont’d
STEP 4
Make sure corresponding check boxes are checked
Allow members to share the site and individual files and folders
If unchecked – users will not be able to share anything
Allow members to invite others to the site members group
If unchecked – users will be able to share files and folders, but not the whole site
sharepointmaven.com @gregoryzelfondsharepointmaven.com @gregoryzelfond
Apiece of wisdom
Best Practice
Put all your content that is meant for external
sharing in a separate site collection (create new
site collection specifically for external sharing)
This way you can turn External Sharing OFF at
your Intranet Site Collection and ON at External
Site Collection
Reference this blog post for more info
sharepointmaven.com @gregoryzelfondsharepointmaven.com @gregoryzelfond
Whatactually happens in the background…
Once you share your site or
document with an External
User and once External User
accepts the request and
logins, that user gets a
profile in your SharePoint
environment
Account field contains email
address used to access the
sites/documents
Work email field contains
email used to share the
site/document with the
external user
sharepointmaven.com @gregoryzelfondsharepointmaven.com @gregoryzelfond
RemoveExternal User from Site Collection
SITE COLLECTION ADMIN
Add the following string at the end of your Site Collection URL
https://companyname.sharepoint.com/_layouts/15/people.aspx?MembershipGroupId=0
List of all users (internal/external) will be displayed. Remove
users as needed