Create an external business-sharing site in SharePoint Online
Do you have a need to share and collaborate with a business partner outside of your company? With SharePoint Online you can quickly and easily create an extranet site. An extranet site is a site where anyone you choose outside of your company can have secure access to content you wish to share or collaborate on. The content is kept in one place and can be accessed anywhere using any device.
The instructions in this article guide you step by step to create a site, set it up to have external access and invite users to your site. It also shows if they have accepted your invitation, as well as monitor any activity including viewing and editing the content.
This video shows some of the options for configuring an extranet site in SharePoint Online.
Set SharePoint Online sharing settings
Before you create a site for external sharing, there are some SharePoint Online sharing settings to configure.
Sign in to https://admin.microsoft.com as a global or SharePoint admin. (If you see a message that you don't have permission to access the page, you don't have Office 365 administrator permissions in your organization.)
In the left pane, under Admin centers, select SharePoint. (You might need to select Show all to see the list of admin centers.) If this opens the new SharePoint admin center, select Classic SharePoint admin center in the left pane.
In the left pane, select sharing.
Under Sharing outside your organization, ensure that either Allow users to invite and share with authenticated external users or Allow sharing to authenticated external users and using anonymous access links is selected. This will allow you to properly configure sharing on your extranet site once you create it.
Under Additional settings, we recommend that you select the External users must accept sharing invitations using the same account that the invitations were sent to check box. This ensures that the users that you invite to your site are the users who accept the invitation. If you don't enable this setting, invitations that you send could be forwarded to other users.
Create a site for your extranet
To begin, create a site collection in SharePoint Online.
To create an extranet site
On the site collections page of the classic SharePoint admin center, select New, and then select Private Site Collection.
Type a title and a web site address.
Choose the Team Site template.
Choose an Administrator, and then select OK.
Next, configure it to allow invited users outside of your company to be able to access the site.
To set up external access
Select the check box for the site collection that you created, and select Sharing.
Under Sharing outside your company, choose Allow external users who accept sharing invitations and sign in as authenticated users.
Under Allowing non-owners to invite new users, select Turn off sharing for non-owners on all sites in this site collection.
Once you've set up external access, add any content that you want to the site for your External users to work on.
Invite users to the site
Next, select someone in your own company to be the site owner, someone who will manage the site. It may be you or any other person internal to your organization.
To set a site owner
Navigate to the site that you created.
Type the name of the user who you want to make a site owner.
Choose SHOW OPTIONS.
Under Select a permission level choose [Full Control].
Once you have a site owner set up, have that owner invite External users to the site. Be sure your users have a work or school account (an account that they can use to log in to Office 365) or a Microsoft account (such as an Outlook.com or Hotmail account). You must send the invitation to one of these types of accounts.
To invite users to the site
On the site that you created, select Share.
Type the email addresses of the people who you want to share the site with.
Choose SHOW OPTIONS.
Confirm that [Edit] is selected under Select a permission level.
External user access
When your external users receive invitations to access the site, they should do the following:
Accept the invitation.
Enter their Microsoft credentials (the credentials for the account that the invitation was sent to).
Bookmark the site so they can return as needed.
Monitoring external user activity
You can monitor the activity of your external users to ensure that they're complying with your business practices. The Security and Compliance center in Office 365 offers a wide variety of options for auditing user activity. Here are a few examples.
Show who has been sent invitations to your extranet site and if they accepted
Sign in to https://protection.office.com/?rfr=AdminCenter as a global admin or other admin who has permission to access the Security & Compliance admin center. (If you see a message that you don't have permission to access the page, you don't have necessary Office 365 administrator permissions in your organization.)
Under Search & investigation, select Audit log search.
In the Activities box, select Accepted sharing invitation and then select Search.
Show what activities your external users have done on the site
In the Security & Compliance admin center, under Search & investigation, select Audit log search.
In the Activities box, select show results for all activities and then select Search.
Managing your site
When you are done collaborating with your external users, you can remove their ability to access the site by doing the following procedure.
Removing a user from having access to the site
On your website or team site, select Settings, and then select Site settings.
On the Site settings page, under Users and Permissions, select People and Groups.
On the People and Groups page, select the name of the group to which you added the user.
Select the check boxes next to the user who you want to remove, select Actions, and then select Remove Users from Group.
In the confirmation window, select OK.
We'd love to hear your thoughts. Choose the type you'd like to provide:
Our feedback system is built on GitHub Issues. Read more on our blog.