expire external user access
Similar to the ability to expire a guest link, it would be nice to have the ability to expire external users (in the Admin portal where you see external users listed per site collection?). When the authorized internal user invite an external user (outside organization), please offer a control to allow for the expiration of access (e.g. 7 days, 1 month, "custom" or hard date like June 30, 2016). This takes away follow-up administration, especially handy for invite clients to your portal for only the timeframe of a project.
Erick Oscarson commented
I noticed that this seems to be (kind of) implemented in the Microsoft SharePoint Tenant- but I haven't yet been able to get it to work. I escalated a ticket with MS IT- they said that "MSIT does not require guest users to loose access based on an expiration date.They need to be removed manually, so it is not featured in the MSIT tenant by design ."
Is this correct that because its not required it wont work on our SharePoint site?
The site seems to have the feature to be able to complete this external guest expiration, but I can't seem to get it to work. Any info or assistance here would be greatly appreciated!
Ignite 2019 this makes it to nearly public preview....
Malgorzata SITS commented
Anyone knows if the feature that was presented on Ignite2018 (thanks Nikita Skitsko) is live? I can't find anything on roadmap or any MS articles that would actually give even slight idea of where to search for it...
Nikita Skitsko commented
Microsoft has already introduced this feature at Ignite 2018, but it's not clear what part of technology or license it is. It might be related to Access Reviews functionality from AADP2 or it's still not generally available. Check this video for guest access expiration introduction https://youtu.be/KvcYz3ERZSY?t=3174
For my company, on the share button, we need another question 'Does this access need to expire? <date picker>' or similar. For us it is targeted at external users only and needs to be governed at a library, item and subsite level governed by our power users which are set as out-of-the-box full control permissions.
2 years later... ?
This is a critical topic for our data access management.
I follow !
They have something coming for Office 365 Groups with some reconfirmation process. But would be nice to have something outside of this, in many cases Office 365 Groups and the attached Team Site are not suitable.
I think this would be a very welcome addition. In general I find managing external users very lackluster.