Forum Discussion
Sharing with Everyone explanation
GarryPope So the difference is that the Everyone group is a security group essentially and you are sharing such that anyone in that security group can use the link. If your Azure AD folks disable the security group, etc. then the people would lose access. Usually the Everyone group in Azure Active directory is a dynamic group (uses a rule to add people).
The other option, share with everyone in the organization does not rely on a group and basically anyone authenticated to your tenant (organization) would be able to use the link.
Hello Greg_Deckler,
This is great. Thanks so much for the help.
The "Everyone@" is a Group, and depending how we manage it, this could contain everyone or certain people or it's been disabled and not used. I'll look into what we've done with that Group.
The "People in your organisation" is anyone who has access to our tenancy can see this data. So that could be, for instance, contractors, exernal guests etc.
If I've misunderstood please reply back. If not, then no problem and again, thanks for your help.
Garry
GarryPope I don't believe it extends to contractors or external guests necessarily. It would be anyone that has the same UPN as your organization *I believe*. So if you gave contractors an actual user in your Azure AD then yes. If they are Azure B2B then I don't believe that is the case.
Hello Greg_Deckler,
You're the best. Thanks so much for coming back to me and clarifying that. I subsequently did a bit of research myself, rather than being lazy and asking you to answer all my questions, haha!
At this Microsoft Docs it says:"People in your organization
This type of link can allow people in your organization to access the report. This link will not work for external users nor guest users. Use this link when you want to share with someone in your organization and are comfortable with them passing the link around to other people inside your organization, but when you want to ensure that the link won’t work for external nor guest users."
Thank you! This is exactly what I have been looking for.
It's quite difficult to get clarity from any documentation on what to do to ensure guest users are restricted from accessing anything, or whether guest users by default have no access that is not explicitly shared with them.
