Permission & Access Issues

How to Allow SharePoint External Access for a Specific Email Domain

Algirdas Jasaitis Sep 28, 2026 869 views

Question details

The user wants to automatically grant SharePoint external access to any user from a specific email domain without needing to send individual invitations.

How to Allow SharePoint External Access for a Specific Email Domain

Product: SharePoint Online
Device & OS: not provided
Scenario: Configuring external sharing policies for a specific partner or client domain.
Observed behavior: SharePoint Online does not natively support automatically granting access based strictly on an email-domain pattern without individual invitations or dynamic security groups.

Before you start

Ensure you have SharePoint Administrator or Global Administrator privileges in your Microsoft 365 tenant to modify external sharing and Azure AD settings.

Solution 1Recommended

Limit External Sharing by Domain in SharePoint Admin Center

You can restrict external sharing at the organizational level so that users can only invite guests from specific approved domains, maintaining security while collaborating.

While SharePoint does not automatically grant blanket access to an entire domain without invites, you can enforce domain restrictions. This ensures that when individual invitations are sent, they are strictly limited to the domains you trust.

Open SharePoint Admin Center

Log in to the Microsoft 365 admin center, navigate to the SharePoint admin center, and expand the 'Policies' menu on the left sidebar. Click on 'Sharing'.

Expand Advanced Settings

Scroll down to the 'More external sharing settings' section and check the box labeled 'Limit external sharing by domain'.

Add Approved Domains

Click 'Add domains', select 'Allow only specific domains', enter the exact email domain you want to approve (e.g., partnerdomain.com), and click Save. Your users can now only send invites to external addresses within this domain.

Limit External Sharing by Domain in SharePoint Admin Center

Feedback to Microsoft: Because automatic domain-wide access without invites is not natively supported, it is recommended to use the organization’s approved sharing controls and submit this feature capability as feedback to Microsoft.

Solution 2

Use Microsoft Entra ID (Azure AD) Dynamic Security Groups

Use Microsoft Entra ID B2B collaboration to create a dynamic group that automatically includes guest users based on their email domain.

Free Microsoft Office alternative

Try WPS Office for Seamless Document Collaboration

While SharePoint handles organizational file storage, WPS Office offers a lightweight, highly compatible alternative for everyday document editing. Collaborate on Word, Excel, and PowerPoint files easily without complex domain permission configurations.

1. Download WPS Office: Visit the official WPS website to download and install the free office suite.
2. Create or Open Document: Launch WPS Office and open your Word, Excel, or PowerPoint document.
3. Share Easily: Click the 'Share' button in the top right corner to generate a simple, secure link for anyone to view or edit, completely bypassing complex tenant setups.

Fully compatible with Microsoft Office formats (.docx, .xlsx, .pptx)Free and lightweight alternative to heavy enterprise office suitesShare documents instantly via simple cloud links without complex domain restrictionsBuilt-in PDF editing, conversion, and signature tools

microsoft office alternative - wps office

Frequently Asked Questions

Why can't I just type a domain name into the SharePoint site share box?

SharePoint requires specific user identities for authentication, auditing, and security compliance. Granting access merely by typing a domain name without an underlying security group or individual invite is not supported natively.

Do external users need a Microsoft account to access the shared SharePoint site?

External users typically need a Microsoft account or an organizational Work/School account. However, if configured, Microsoft also supports Email One-Time Passcode (OTP) authentication for guests without Microsoft accounts.

Will limiting external sharing by domain affect existing guest users?

Yes. If you apply a domain restriction policy in the SharePoint Admin Center, any existing guest users whose email domains are not on the allowed list will immediately lose access to the site content.

Document & File Issues