External User Manager gives you the ability to fully control how Guests are invited into your organization and which Spaces they get to interact with.
The installation procedure itself is not that different from other Teams Apps, with the exception of a couple of extra steps.
We'll go through the entire setup process and ensure that your External User Manager instance is fully operational by the end of this article.
📋 Prerequisites
In order to properly install External User Manager, you must occupy the Microsoft Global Teams Admin role within your organization.
If you’re not the Global Teams Admin, please forward this guide to them so they can go through the full setup process.
If you plan to utilize the full feature set of the app, you'll need a Service Account to perform actions that aren't possible through the application API.
⚙️ Initial Setup
1. Start by adding External User Manager to your Microsoft Teams account.
2. Opening External User Manager for the first time will take you straight to the Chat tab, where you get notifications about actions that require your approval.
3. You'll see a quick-start message that allows you to go through the authorization process. Click Start to begin filling out a brief trial registration form.
If your tenant has an active External User Manager License in place, this registration form will be skipped.
You can verify your licensing status by contacting your sales manager or by sending us an e-mail at [email protected]
✅ Granting Permissions
In order for the app to function as intended, it will need to communicate with a number of Microsoft Graph API endpoints to pull and rewrite information related to different members and settings in Teams.
This two-way communication requires you to grant different permissions based on the functionality you intend to use. You can explore a list of all permissions (along with their purpose) through our Trust Center.
Navigate to Settings > Setup in External User Manager to start granting permissions.
1) Tenant administrator (Mandatory) - This is the most rudimentary permission set required for the app to function.
2) Service account (Optional) - This option prompts you to add a service account that will allow the app to perform actions that aren’t possible through the API.
3) Extended trust (Optional) - This permission set grants the app extended team guest access, allowing you to invite guest users to a team that's configured to block them, utilize the Run the Team Guest Automation function, and sync with the Deny/Allow lists in your Microsoft Admin Portal.
4) Extended logging (Optional) - This option allows you to select between Normal and Verbose logging. Verbose logging saves more information, including all system activities, debug information, and minor operations, which makes troubleshooting easier.
💡 Grant permissions as deemed necessary; however, keep in mind that not granting certain permissions will prevent you from fully utilizing some parts of the app.
💬 FAQ
Why are all these permissions needed?
Find out more about why you need to grant certain permissions through our trust center.
👣 Next Steps
Now that you’ve granted all the necessary permissions, you can familiarize yourself with how the app operates.
We recommend starting here:
⛑️ Need more help?
Get further assistance with Teams Manager through our support chat widget within the app, or reach out to us at [email protected].