Permission & Access Issues

How to Allow External Users on a Single SharePoint Site Only

Maira Mehtab Sep 22, 2026 869 views

Question details

An organization needs to grant external users access to one specific SharePoint site while keeping all other sites strictly restricted to internal users.

Product: Microsoft SharePoint
Device & OS: not provided
Scenario: Administrators need to configure external sharing policies to isolate external access without exposing the entire organization's internal data.
Observed behavior: The administrator must find and adjust the correct organization-wide and site-level configurations in the SharePoint admin center to achieve this isolated external access.

Before you start

Ensure you have SharePoint Administrator or Global Administrator privileges in your Microsoft 365 tenant before attempting to modify organization-wide sharing policies.

Solution 1Recommended

Configure Organization-Wide and Site-Level Sharing Policies

By adjusting policies in the SharePoint Admin Center, you can restrict sharing globally while overriding the setting for the specific site that requires external access.

SharePoint handles external sharing at two levels: organization-wide and site-specific. The site-specific settings cannot be more permissive than the organization-wide settings unless explicitly configured. To allow access to just one site, you must configure the global baseline and then invite external users to the target site.

Set Organization-Wide Sharing to Internal Only

Log in to the Microsoft 365 Admin Center and navigate to the SharePoint Admin Center. In the left pane, expand 'Policies' and select 'Sharing'. Set the external sharing level for SharePoint to 'Only people in your organization'.

Enable External Sharing for the Target Site

In the SharePoint Admin Center, go to 'Sites' > 'Active sites'. Select the specific site you want to share with external users. Click on the 'Sharing' tab in the properties panel and change its external sharing setting to 'New and existing guests' or 'Anyone'.

Invite External Users

Navigate to the Microsoft 365 Admin Center or Microsoft Entra ID (formerly Azure AD) to invite the external user as a Guest. Alternatively, navigate directly to the target SharePoint site and use the 'Share' feature to grant the external user site permissions.

Microsoft Entra B2B Integration: Managing external users through Microsoft Entra ID (Azure AD) provides better auditing, lifecycle management, and security controls over guest accounts.

Free Microsoft Office alternative

Looking for a Lightweight Alternative for Document Collaboration?

While SharePoint handles complex enterprise site permissions, WPS Office provides a seamless, free, and lightweight solution for daily document creation and sharing. It offers high compatibility with Microsoft Office formats and makes team collaboration straightforward without requiring complex administrative configurations.

1. Download WPS Office: Visit the official WPS Office website and download the installer for your operating system.
2. Install and Set Up: Run the installer and follow the on-screen instructions to complete the setup process in minutes.
3. Collaborate and Share: Open WPS Office to easily create, edit, and share documents with external partners using secure sharing links.

Highly compatible with Microsoft Word, Excel, and PowerPoint formats.Free and lightweight alternative to Microsoft Office.Built-in cloud storage for easy document sharing and team collaboration.Familiar user interface for seamless migration with zero learning curve.

microsoft office alternative - wps office

Frequently Asked Questions

Can I share a single folder externally instead of the whole SharePoint site?

Yes. If site-level external sharing is enabled, you can select a specific folder or file in the document library, click the 'Share' button, and grant access to specific external guests without giving them access to the entire site.

Do external users need a Microsoft account to access the shared SharePoint site?

Not necessarily. If you use 'Specific people' sharing links, external users can authenticate using a one-time passcode sent directly to their email, meaning they do not strictly need a registered Microsoft account.

Why is the external sharing option greyed out for my SharePoint site?

The external sharing option at the site level is likely greyed out because your organization-wide sharing settings in the SharePoint Admin Center are set to a more restrictive level. Organization-level settings always override site-level settings if they are more restrictive.

Document & File Issues