Forum Discussion
johnjohn-Peter
Feb 19, 2025Iron Contributor
Limit-Access to all external users, how we can do this
Inside SharePoint Admin center >> Access Control, we can define limit-access to unmnaged devices:-
but for a tenant i am working on, we want to do it in another way, instead of relying on the device if it is managed or unmanaged, to control this based if the user is internal or external. so can we do this? now inside this documentation, IT Admins - SharePoint and OneDrive unmanaged device access controls - SharePoint in Microsoft 365 | Microsoft Learn , they mentioned that we can restrict this based on user group:-
so this means if we automatically add any external users to a group , then we can define this group to only have limited-access will this work? so internal users even if they access from unmnaged devices will have full access since they are not inside the group?? i am not an administrator but rather a SharePoint developer. so if any one can help me achieving this inside AD if it is not possible inside SharePoint? first how we can automatically add any external users to a group , then how we can define this group to have limited-access??
Thanks
- ArefHalmstrandSteel Contributor
Hello,
To automatically add any external users to a group. Create a Dynamic security group.
Add a rule that includes all users with the type "guest".
See more : Manage rules for dynamic membership groups in Microsoft Entra ID - Microsoft Entra ID | Microsoft Learn
About limiting access, what type of access are you trying to limit/prevent? Could you give some examples?- johnjohn-PeterIron Contributor
ArefHalmstrandok thanks for the reply.. there is something called limit-Access ,, which allow you to edit and read the documents using the browser only, without the ability to sync it locally or download it.. this what i am looking for for all external users..