Share External Users SharePoint: How Sharing Works

Yes, SharePoint allows you to share sites, files, and folders with people outside your organization, but exactly how it works depends on your organization’s external sharing settings, the type of SharePoint site, and the Microsoft 365 license in use. You can share with external users by sending them a secure link, adding them as guests in Microsoft Entra ID (formerly Azure AD), or inviting them directly to a site — each method gives different levels of access and control.

What Does “External User” Mean in SharePoint?

An external user is anyone who is not a member of your organization’s Microsoft 365 tenant. This includes people with personal Microsoft accounts (like @outlook.com or @hotmail.com), people from other companies who have their own Microsoft 365 accounts, and people with email addresses from any other provider (e.g., Gmail, Yahoo). SharePoint treats these users differently from your internal employees — they get limited access by default, and their activities can be audited separately.

There are two main categories of external sharing in SharePoint:

• Guest sharing — an external user is invited to a site or a specific item. They receive a guest account in your Microsoft Entra ID and can sign in with their own credentials.
• Anonymous sharing — anyone with the link can access the item without signing in. This is the most open option and is often disabled by administrators.

How External Sharing Works in SharePoint

When you share a file or site with an external user, SharePoint creates a secure link that can be sent via email or copied. The link can be configured to require sign-in (for guests) or to allow anonymous access (if enabled). If the recipient is not already a guest, they will be prompted to verify their email address with a one-time passcode, then they can access the content.

For site-level sharing, an administrator or site owner can add an external user as a guest to the site. This gives them a SharePoint permission level (like Read, Edit, or Full Control) that applies to the entire site. The guest will appear in the site’s member list and can access all content they have permission to, just like an internal user with the same permission level.

Behind the scenes, SharePoint uses Microsoft Entra ID to manage guest identities. When you invite an external user, a guest account is created in your directory, and they are added to the site’s SharePoint group. This integration allows you to enforce conditional access policies, multi-factor authentication, and other security controls on external users.

External Sharing Settings and Permissions

Your SharePoint administrator controls the overall external sharing policy at the tenant level, and site owners can further restrict it per site. The typical sharing levels are:

• Anyone with the link — anonymous access, no sign-in required (often disabled by default).
• New and existing guests — external users must sign in; new guests are added to your directory.
• Existing guests — only people already in your directory can access; new invites are blocked.
• Only people in your organization — external sharing is completely disabled.

Even when external sharing is enabled, individual site owners can choose to turn it off for their site. Also, certain content types (like site pages or some list items) may not support external sharing, and some features (like Power Apps or Power Automate) may not work for guests.

How to Share with External Users (Step-by-Step)

Sharing a file or folder with an external user is straightforward:

1. Navigate to the file or folder in SharePoint (or OneDrive).
2. Click the Share button (or right-click and select Share).
3. Enter the external user’s email address.
4. Choose a permission level (View or Edit) and optionally set an expiration date.
5. Add a message if you want, then click Send.

The recipient will receive an email with a link. If they are not already a guest, they will be asked to verify their email with a one-time code, then they can access the content. For site-level sharing, go to the site’s Settings → Site permissions → Share site, then add the external user as a guest.

Common Problems and How to Avoid Them

External sharing often fails due to a few recurring issues:

• External sharing is disabled — the most common cause. Check with your admin or look for the sharing options in the site settings.
• Recipient’s email domain is blocked — some organizations block certain domains (e.g., personal email providers). The admin can allow or block specific domains.
• Guest account already exists — if the user was previously invited but hasn’t accepted, you may need to resend the invitation.
• Expiration or access reviews — if your organization has set expiration dates for guest access, the link may stop working after a certain time.
• Multi-factor authentication (MFA) — if your tenant requires MFA for guests, they must set it up before accessing content.

If a recipient reports that they cannot access the shared item, first verify that the sharing link is still valid and that the recipient’s email address is correct. Then check the site’s sharing settings and the tenant-level policy.

Security and Compliance Considerations

Sharing with external users introduces security risks, so it’s important to follow best practices:

• Use links with specific permissions — avoid “Anyone with the link” unless absolutely necessary.
• Set expiration dates — for temporary projects, set an expiration date on the link or the guest account.
• Restrict sharing to specific domains — you can allow only certain external domains (e.g., your partner company) to receive invites.
• Monitor guest activity — use SharePoint’s audit logs to see what external users are doing.
• Review guest accounts regularly — remove guests who no longer need access.

Your organization’s compliance policies (like data residency or confidentiality) may also restrict external sharing. For example, if you handle sensitive personal data, you may need to encrypt files or use protected sharing (like Azure Information Protection) before sharing externally.

Alternatives to External Sharing in SharePoint

If external sharing is too risky or not allowed, consider these alternatives:

• Send a copy as an email attachment — simple but loses version control and collaboration.
• Use a secure file transfer service — like Microsoft 365’s built-in file transfer or a third-party service (but be careful with data policies).
• Create a guest-only site — a separate SharePoint site with limited content, where external users can collaborate without accessing your main sites.
• Use Microsoft Teams external collaboration — Teams allows adding external users as guests, and they can access files shared within the team.

Frequently Asked Questions

Can external users edit files in SharePoint?

Yes, if you grant them Edit permission when sharing. They can edit Office documents in the browser or in desktop apps, and changes sync back to SharePoint. However, some advanced features (like co-authoring with external users) may have limitations depending on the file type.

Do external users need a Microsoft 365 license?

No, external users do not need a license from your organization. They use their own Microsoft account or the one-time passcode to access the shared content. However, if you want them to have a full guest experience (like being added to a team), they may need a free Microsoft account.

How do I remove an external user’s access?

You can remove access by deleting the sharing link (if you used a link) or by removing the guest from the site’s permissions. To completely revoke access, go to Site permissions, find the guest, and remove them. If they were added to your directory, an admin can also delete the guest account.

Can I share a SharePoint site with external users?

Yes, site owners can share the entire site with external users by adding them as guests. The site must have external sharing enabled at the tenant and site level. Guests will see the site in their SharePoint start page (if they sign in) or access it via the link.

What is the difference between sharing a link and adding a guest?

Sharing a link is a quick way to give access to a specific item; the link can be set to require sign-in or be anonymous. Adding a guest creates a permanent account in your directory and gives them access to a site or a broader set of resources. Guests can be managed centrally, while links are more ephemeral.

Related

• Avoid Inbox Clutter: Spam Reduction Guide
• 200 HD Films in 1 Second with BTS? Truth
• How to Solder Wires and Components Safely

in t | Time to share (min) | min | 5 | 0
sel level | Sharing level | View=1, Edit=2, Full Control=3
out effort | Sharing effort score | - | t * level | 0