---

---

Part 1 of 2: The End User Experience

Guest Access is a really useful way to work collaboratively in Microsoft Teams with people who are not part of your tenant. However, most organisations want to provide controls that allow some teams to have Guests and block external users from others. This can be achieved in a number of ways ranging from PowerShell to the Power Platform and the approach an administrator takes will most likely depend of the business requirements and the security posture of their company.

One way of providing end users the ability to choose their Guest policy as they create (or edit) a team is via the assignment of a Sensitivity Label. These can be used for a variety of purposes such as protecting content or restricting access from un-managed devices but the video below focuses on blocking/allowing external users within a team.

In Part 2 of this blog I’ll run through the basic admin experience around the creation of the Sensitivity Labels shown in the above demonstration.