Редактиране

Споделяне чрез

Teams apps for external attendees or guests from outside an organization

  • Статия
  • Приложимо за:
    Microsoft Teams

Teams apps allow collaboration with people outside your organization. As an admin, you control who can access Teams chats, meetings, and channel to collaborate with your organization's users. For detailed information, see how to allow collaboration with external attendees and what can guests do in Teams. This article focuses on use of apps by people outside your organization.

Teams users can add apps when they host meetings or chats with people from other organizations. They can also use apps shared by people in other organizations when they join meetings or chats hosted by those organizations. The data policies of the hosting user's organization, as well as the data sharing practices of any third-party apps shared by that user's organization, are applied.

The following types of users can be present in a Teams chat or meeting and if you allow it, they can use apps in Teams.

  • A guest is someone who has an Microsoft Entra B2B collaboration guest account your organization.

  • An external access user is from another domain and doesn't have access to your organization's Teams resources.

  • An anonymous user is a user who joins a meeting via a link. The user isn't logged in with their Microsoft account or their organization’s account.

For a more detailed comparison between guest and external access users, see communicate with users from other organizations.

Guests

Add, update, and delete apps for guests

  • Guest users can't find and add apps from Teams app store (AppSource or client store) and from the in-context stores in Teams.

  • Guests can't add, update, or delete apps into a shared context, such as a chat, channel, or meeting.

  • Guest users can access the app store and add apps using deep links shared with them by others. However, guest users can use such apps in personal scope only and the app icon doesn't display in the app bar.

  • Guest users can use apps added by other org users in personal chats, group chats, and teams and channels.

Usage behavior and policy for guests

Guests can use an app if the app was added by an organization's user.

Bots added to a channel

Guests can mention the bot and interact with adaptive cards.

Personal bots added with policies

  • For any app, guests adhere to global and org-wide permission policies set for the host organization. If an app is blocked for the whole host organization, then guests can't use the app either.
  • Any bot included in the global default app setup policy is also added for guests.
  • After a bot is added, bots and guests can communicate with each other.
  • You can't remove a guest from the global default app setup policy.
  • To avoid guest from accessing bots, you can create more app setup policies, assign them to internal users, and add bots with the custom policies.

External access users

Add, update, and delete apps for external access users

Teams users can add apps in group chats with people from other organizations, including external users. Group chats hosted by the other organization works, but such a chat doesn't work in one-on-one chats of your org users and the external users.

The external users don't have access to the Teams app store of the hosting organization.

Usage behavior and policy for external access users

Users from other organizations can't use apps in 1:1 chats with org users, even if the org users try to add apps to individual chats.

  • Meeting host can install, remove, or update apps for use by all members of a meeting, including external users.
  • Users in the hosting organization can add apps in meeting chats and group chats that include people from other organizations. People from other organizations can't add apps in chats but can interact with apps such as bots, tabs, and message extensions, after the apps are added to the chat.
  • People from other organizations adhere to the hosting organization's global (org-wide default) policy.
  • After a bot is added in a meeting chat, it can proactively communicate with people from other organizations in that chat, and those people can communicate with bot.
  • The data policies of the hosting organization are applied.
  • The data sharing practices of any third-party apps shared by that user's organization are applied.

Anonymous users

Add, update, and delete apps for anonymous users

Anonymous users can't add, update, or delete apps in meetings.

Usage behavior and policy for anonymous users

Anonymous users can't directly use apps in meetings. If an app sends an adaptive card in the chat, anonymous users can interact with the card. Such users can interact with apps in Teams meetings if the user-level permission policy enables the app. Anonymous users inherit the user-level global default permission policy.

Anonymous users can interact only with the apps that are already available in a meeting but can't acquire and manage such apps. The native users can continue to use meetings apps even when the anonymous users are attending a meeting.

Allow anonymous users to use apps in meetings

By default, anonymous users can interact with the existing apps in a meeting. Anonymous users can't add new apps to a meeting. You can disallow anonymous users for interacting with apps.

  1. Sign in to the Teams admin center and access Meetings > Meeting settings.

  2. Under Participants, change the toggle for Anonymous users can interact with apps in meetings to Off.

  3. Select Save.