How to Add Guest Users to Microsoft 365 Groups (Admin Guide)
If a guest already exists in your directory, you can add them to your groups from the Microsoft 365 admin center. Here are steps on how to add guests to Microsoft 365 groups.
In the admin center, Visit Teams & groups > Active teams & groups. Select the group to add the guest and select Membership > Members. Select Add members and choose the guest name to add and select Save.
In this blog post, we have discussed guest access, steps to add, manage and remove guest users, permissions management in Microsoft 365 groups, and more.
Key Takeaways:
What is Guest Access in Microsoft 365 Groups?
Guest access in groups is often used as part of a broader scenario that includes SharePoint or Teams. These services have their own guest sharing settings. By default, guest access for Microsoft 365 groups is turned on for your firm.
Admins can control whether to allow guest access to groups for everyone or for individual groups. When it’s turned on, group members can invite guests to a Microsoft 365 group through Outlook on the web. The group owner receives invitations for approval. Once approved, the guest gets added to the directory and the group.
Add Guests to Microsoft 365 Groups
To add guests to a Microsoft 365 group from the admin center, make sure guest access is enabled for your organization. Admins or group owners can then add external users who are already in the directory as guest users.
Here are the easy 6 steps to add a guest user to a Microsoft 365 group:
Step 1: Go to Microsoft 365 Admin Center
Go to the Microsoft 365 admin center and go to Teams & groups > Active teams & groups.
Step 2: Select the Group
Choose the group you want to add the guest user to.
Step 3: Go to Membership Settings
Click on the Membership tab, then Members.
Step 4: Add the Guest
Select Add members to add your guest.
Step 5: Find Your Guest
Search for the guest user by name or email, and select them.
Step 6: Save
Click Add to add the guest user to the group. They’ll get an invitation to join and can start collaborating once they accept.
If The Guest Is Not Yet in Your Directory:
- You’ll need to invite them as a guest user (B2B collaboration user) via Microsoft Entra ID (previously Azure Active Directory) or directly from Users > Guest users > Add a guest user in the admin center.
- Once added, you can add them to groups from the same Membership screen.
Additional Notes
- You need to have the right admin roles, such as User Administrator or Guest Inviter, to invite external users as guests.
- The guest will receive an invitation email and must accept it to complete the process.
- You can remove guests anytime from Users > Guest users.
- Bulk guest invitations can be done via Microsoft Entra admin center or PowerShell scripts for automation and scale.
This allows guests to collaborate in Teams, SharePoint and access shared resources, subject to the permissions in the group.
Office 365 Guest Users Limitations
- Limited Access: Guests can use Teams, SharePoint, and shared resources, but can’t access all features.
- Restricted Directory Access: Guests only see groups and users shared with them.
- App Limitations: Some apps, like Planner, Power Automate, or Yammer, may have limited functionality.
- Email & Calendar Restrictions: Guests can’t send emails on behalf of the organization or access full calendar features.
- SharePoint Restrictions: Limited access to libraries, lists, and site creation.
- Group Access: Guests must be added manually as they can’t join groups on their own.
- Security & Compliance: No access to sensitive compliance tools or audit logs.
- Expiration Policies: Guest accounts may expire and need to be re-invited.
If you are planning to migrate to Microsoft 365 or need the best Microsoft 365 tenant to tenant migration service, we at CloudFuze offer fully managed Microsoft 365 migrations service for SMBs and large enterprises. For more information, connect with our experts.
How to Enable Guest Access for Microsoft 365 Groups?
Here are steps to enable or disable guest access for Microsoft 365 Groups:
Step 1: Go to Microsoft 365 Admin Center & Click on Show All
Visit Microsoft 365 Admin Center. In the left column, click on … Show all.
Step 2: Go to Org Settings
Now, navigate through Show all > Settings > Org settings.
Step 3: On the Services tab, select Microsoft 365 Groups.
As you expand the Org settings tab, you can now select the Microsoft 365 Groups under Services tab.
Step 4: Select To Enable or Disable Guest Access in Groups
On Microsoft 365 Groups, choose whether to let people outside your organization access group resources or let group owners add people outside your organization to groups.
How to Remove Guest Access for Microsoft 365 Groups?
Here are steps to remove guest access for Microsoft 365 Groups:
Step 1: Go to Microsoft 365 Admin Center & Go to Select Users
Visit the Microsoft 365 admin center. Then, expand Users. Now select Guest users.
Step 2: Now Choose the User to Delete
On the Guest users page, choose the user to remove and then choose Delete a user.
Resolving Issues in Adding Guest Users to Microsoft 365 Groups
When you try to add a guest user to a Microsoft 365 group, you may receive this error message stating that “There was a problem adding one or more people to the group. For help, contact your administrator”. This occurs if the guest user who you are trying to add already exists in Microsoft Entra ID.
To resolve this issue, you can delete the user object from the on-premises directory. Or replace the user with a mail contact by deleting the user object and creating a mail contact with the same properties.
You can also solve this issue by moving the user’s object to an organizational unit (OU) in the on-premises directory and excluding that OU from synchronizing through Microsoft Entra Connector.
Permissions Management for Guest Users in Microsoft 365
Guest users have a limited permission level by default in Microsoft Entra ID. There’s another guest user permission level in your Microsoft Entra organization’s external collaboration settings for even more restricted access, so that the guest access levels are:
Image Courtesy – Microsoft
When guest access is restricted, guests can view only their user profile. Permission to view other users isn’t allowed even if the guest is searching by User Principal Name or objectId. Restricted access also restricts guest users from viewing the membership of groups they’re in.
Why Manage Permissions?
Permission sprawl is turning to be one of the major security risks in enterprises. The major reason behind these security breaches is due to unchecked or existing excessive privileges to your confidential business files.
Managing permissions for Microsoft 365 Groups is necessary for Copilot to operate safely. When you deploy Copilot, it doesn’t end with just providing a search result. It displays content based on users’ access. So, cleaning up your permissions is necessary for safely deploying AI.
Eliminate Permission Sprawl with CloudFuze Manage
To fully detect and control permission sprawl, use our SaaS and AI governance platform, CloudFuze Manage. Here is how our platform helps you with effective permission management. You can check the level and type of access permissions applied across your cloud and AI agent workspace.
Our platform detects risky file sharing and over-permissioned user access, implement stale-permission cleanup policies, and ensure permission governance through policy enforcement.
Interested to know how our platform excels at permission sprawl management? Contact us for a free demo now!
Frequently Asked Questions
1. How do I add a guest user to Office 365 groups?
Go to Users > Guest users > Add a guest user or add them directly to a group via Teams & groups > Active teams & groups > Membership > Add members.
2. What permissions do guest users have?
Guest users can access shared resources and participate in Teams and SharePoint. But remember that their permissions are limited compared to full members.
3. What’s the difference between guest users and external users?
Guest users have a Microsoft 365 guest account and can participate in collaboration features. In contrast, external users usually access only shared links or content without a guest account.
4. Are there any limitations for guest users?
Yes. Guest users have restricted access to apps, Teams features, SharePoint libraries, and compliance tools. They may also be subject to expiration policies.
5. How to remove a guest user?
Visit Microsoft 365 admin center. Now expand Users and select Guest users. On the Guest users page, choose the user to remove and then choose Delete a user.
6. What role do I need to invite a guest?
You should have a Guest Inviter or User Administrator role to invite a guest user.
About the Author: Bhavani Asok
