Can a Group Owner Add an External User to a Microsoft 365 Security Group?
Question details
Users want to know if a standard group owner has the permissions to directly add an external user to a mail-enabled security group.
- Product
- Microsoft 365
- Device & OS
- not provided
- Scenario
- A group owner needs to include an external partner or client in a mail-enabled security group for communications and resource access.
- Observed behavior
- Group owners are unable to directly add external users; the system requires the external user to be present in the organization's directory as a guest first.
Verify that you have contact with your organization's IT department, as you will need an administrator with Global Admin or Guest Inviter privileges to complete this process.
Ask an Administrator to Invite the Guest User via Admin Center
Because group owners lack directory-level permissions, a Microsoft 365 administrator must first add the external user to the organization's directory.
A group owner cannot add an external user directly to a mail-enabled security group. The guest must first be established in the Microsoft 365 directory. Once the admin adds the guest, the group owner can successfully add them to the security group.
Have a Microsoft 365 Administrator sign in to the Microsoft 365 Admin Center using their admin credentials.
Go to the left-hand navigation menu, expand 'Users', and click on 'Guest users'.
Click on 'Add a guest user' and enter the external user's email address and profile details.
Send the guest invitation. Once the external user is populated in the directory, the group owner can add that specific user to the mail-enabled security group.
Try WPS Office for Seamless and Free Document Collaboration
While Microsoft 365 manages complex organizational security groups, WPS Office offers a lightweight, free alternative for everyday document creation and sharing. Enjoy seamless collaboration without the administrative overhead.
- 1. Download WPS Office: Visit the official WPS website and download the free installation package for your operating system.
- 2. Install the Software: Run the downloaded installer and follow the quick on-screen prompts to set up the software.
- 3. Open and Edit Microsoft Files: Launch WPS Office and directly open your Word, Excel, or PowerPoint files to start editing and collaborating instantly.
Frequently Asked Questions
Can a standard group owner invite a guest directly to a security group?
No, standard group owners cannot invite external guests directly into a mail-enabled security group. The guest must first be added to the organizational directory by an admin.
What admin roles are required to invite external users in Microsoft 365?
Generally, a Global Administrator, User Administrator, or a user assigned the specific Guest Inviter role is required to add external users to the directory.
Can external users be added to Microsoft 365 Groups instead?
Yes, standard Microsoft 365 Groups support guest access by default. Group owners can often add guests directly to these standard groups if the organization's external sharing settings permit it, whereas mail-enabled security groups have much stricter limitations.
