'%3e%3cpath%20d='M8%200C12.4183%200%2016%203.58172%2016%208C16%2012.4183%2012.4183%2016%208%2016C3.58172%2016%200%2012.4183%200%208C0%203.58172%203.58172%200%208%200ZM11.6162%204.38379C11.2257%203.99337%2010.5927%203.99338%2010.2021%204.38379L8%206.58594L5.79785%204.38379C5.40732%203.99334%204.77429%203.99329%204.38379%204.38379C3.99331%204.77429%203.99335%205.40733%204.38379%205.79785L6.58594%208L4.38379%2010.2021C3.99348%2010.5927%203.99341%2011.2257%204.38379%2011.6162C4.77426%2012.0066%205.40734%2012.0065%205.79785%2011.6162L8%209.41406L10.2021%2011.6162C10.5927%2012.0066%2011.2257%2012.0067%2011.6162%2011.6162C12.0067%2011.2257%2012.0066%2010.5927%2011.6162%2010.2021L9.41406%208L11.6162%205.79785C12.0066%205.40735%2012.0066%204.77429%2011.6162%204.38379Z'%20fill='%23080E17'%20fill-opacity='0.46'/%3e%3c/g%3e%3cdefs%3e%3cclipPath%20id='clip0_3761_713'%3e%3crect%20width='16'%20height='16'%20fill='white'/%3e%3c/clipPath%3e%3c/defs%3e%3c/svg%3e)
Configure Microsoft 365 Multi-Tenant Organization Access Reviews
Question details
The organization needs to configure cross-tenant application access for users in Tenant A to access Tenant B, and understand how guest access reviews and licensing work in a multi-tenant environment.
- Product
- Microsoft 365
- Device & OS
- not provided
- Scenario
- Setting up cross-tenant application access and managing governance through guest access reviews.
- Observed behavior
- Administrators need clarity on whether user licenses transfer between tenants and what specific licensing is required in the host tenant to perform access reviews.
Ensure you have Global Administrator or Privileged Role Administrator access in both Tenant A and Tenant B to configure Microsoft Entra multi-tenant settings and verify licenses.
Configure Multi-Tenant Access and Verify Host Licensing
Set up Microsoft Entra multi-tenant organization capabilities and ensure the host tenant has the correct licenses for guest access reviews.
When setting up cross-tenant access, licenses assigned to users in their home tenant (Tenant A) do not transfer to the resource tenant (Tenant B). To perform automated guest access reviews in Tenant B, Tenant B must independently hold the required governance licenses.
Log in to the Microsoft Entra admin center for Tenant B and navigate to Billing > Licenses. Verify that Tenant B has active Microsoft Entra ID P2 or Microsoft Entra ID Governance licenses.
In the Microsoft Entra admin center, navigate to Identity > External Identities > Cross-tenant access settings, and configure the multi-tenant organization settings to allow inbound access from Tenant A.
Ensure the target application in Tenant B is configured to accept guest users, and provision the users from Tenant A as B2B collaboration guests in Tenant B.
Navigate to Identity Governance > Access Reviews in Tenant B. Create a new access review targeting the guest users invited from Tenant A to regularly audit their application access.
Looking for a Simpler Office Solution? Try WPS Office
While Microsoft 365 offers complex enterprise tenant management and governance, if your team simply needs a reliable, lightweight suite for creating and sharing documents, WPS Office is an excellent free alternative. It provides robust tools without the heavy administrative overhead.
- 1. Download the Installer: Visit the official WPS Office website and click the Free Download button.
- 2. Install the Software: Run the downloaded installer and follow the simple on-screen instructions to set up the suite on your device.
- 3. Start Creating: Open WPS Office to instantly start creating, editing, and sharing your documents with full Microsoft format compatibility.
Frequently Asked Questions
Do Microsoft 365 licenses transfer between tenants for guest users?
No, licenses assigned to a user in their home tenant (Tenant A) do not transfer to the resource tenant (Tenant B). Tenant B must be licensed separately for advanced features like guest access reviews.
What licenses are required to run guest access reviews in Microsoft Entra?
The resource tenant hosting the application (Tenant B) must have Microsoft Entra ID P2 or Microsoft Entra ID Governance licenses to utilize automated access review capabilities for guest users.
How do users from one tenant access applications in another?
They can securely access the applications through Microsoft Entra's multi-tenant organization capabilities and B2B collaboration, which provisions them as guest users in the host tenant.
