📖 What is Cross-Tenant Access Settings?
Cross-Tenant Access Settings allow administrators to configure how their Microsoft Entra ID tenant interacts with other external tenants. This includes controlling B2B collaboration and synchronization settings to secure cross-organizational communication and identity trust.
"This is the modern way to manage B2B. Focus on how you can restrict collaboration to only specific, trusted partner tenants rather than allowing all external users."
📚 Certification: Microsoft 365 Administrator (MS-102)
🔑 What are the Key Concepts of Cross-Tenant Access Settings?
- ▸ B2B Collaboration settings manage how guest users are invited and accessed, allowing administrators to restrict access to specific trusted partner tenants.
- ▸ B2B Direct Connect enables seamless collaboration via Teams Shared Channels, removing the need for users to switch tenants to access shared content.
- ▸ Inbound settings control how external users enter your tenant, while outbound settings manage how your internal users interact with external organizations.
- ▸ Trust settings allow administrators to accept MFA or device compliance claims from the home tenant, streamlining the login experience for guests.
- ▸ Tenant restriction lists provide the ability to explicitly allow or deny access to specific organizational IDs, preventing unauthorized cross-tenant data leakage.
🎯 How does Cross-Tenant Access Settings appear on the MS-102 Exam?
You may be asked to configure a security policy that allows B2B collaboration only with a specific list of approved partner tenants while blocking all other external organizations to prevent data leakage.
A scenario might describe a requirement to implement Teams Shared Channels between two organizations; you must identify the correct B2B Direct Connect settings to enable this seamless interaction without tenant switching.
Expect questions about reducing guest friction by trusting MFA from the home tenant, requiring you to modify the inbound trust settings for a specific partner to avoid redundant authentication.
❓ Frequently Asked Questions
What is the primary difference between B2B Collaboration and B2B Direct Connect?
B2B Collaboration creates guest accounts in your directory for external users, whereas B2B Direct Connect allows users to collaborate in Shared Channels without needing a guest account or switching tenants.
Can Cross-Tenant Access Settings be applied to only a subset of users?
Yes, administrators can apply these settings to all users or target specific users and groups, ensuring that only authorized personnel can collaborate with specific external tenants based on their role.