Microsoft Entra ID · Teams Communication
Teams External Collaboration Administrator
Manages external collaboration policies and settings for Teams, including configuring external domains and controlling which groups and users can interact with the organization.
Scope: External collaboration and federation settings within Microsoft Teams
Permissions
- Configure external access domains for Teams
- Manage external collaboration policies
- Control which groups can communicate externally
- Configure guest access settings for Teams
- Manage cross-organization communication settings
- Set external sharing policies for Teams
Common use cases
- Configuring approved external domains for Teams federation
- Managing B2B collaboration policies for Teams
- Controlling external meeting and chat access
- Setting up cross-organization collaboration securely
- Restricting external communication to specific groups
Best practices
- Maintain an allowlist of approved external domains
- Regularly audit external collaboration settings
- Coordinate with security team on external access policies
- Document approved external collaboration partners
- Use sensitivity labels to protect shared content
Security considerations
- External collaboration opens data sharing channels — requires careful policy design
- Misconfiguration could expose internal data to unauthorized external parties
- Monitor external collaboration patterns for anomalies
- Coordinate with DLP policies for external sharing
Common questions
When should I assign the Teams External Collaboration Administrator role?
Assign Teams External Collaboration Administrator when you need to: Configuring approved external domains for Teams federation; Managing B2B collaboration policies for Teams; Controlling external meeting and chat access; Setting up cross-organization collaboration securely; and Restricting external communication to specific groups. It is part of Microsoft Entra ID and should be granted as a least-privilege alternative to broader roles like Global Administrator.
What can someone with the Teams External Collaboration Administrator role do?
The Teams External Collaboration Administrator role grants permissions including: Configure external access domains for Teams; Manage external collaboration policies; Control which groups can communicate externally; Configure guest access settings for Teams; Manage cross-organization communication settings; and Set external sharing policies for Teams. See the Permissions section above for the full list.
What are the security risks of the Teams External Collaboration Administrator role?
Key considerations when assigning Teams External Collaboration Administrator: External collaboration opens data sharing channels — requires careful policy design; Misconfiguration could expose internal data to unauthorized external parties; Monitor external collaboration patterns for anomalies; and Coordinate with DLP policies for external sharing. Review the Security considerations section before assignment, and pair with Privileged Identity Management (PIM) for just-in-time access where possible.