🛡️🧑💼👈🔓Group - Multi tenant Teams Allowed users
What this group is for 🎯
This is the exception group linked to:
Members of this group are explicitly allowed to sign into Microsoft Teams with accounts from other tenants.
When to use it (and when not to) 🧐
Legitimate use cases include:
- Mergers & acquisitions — joint Teams collaboration before a full migration
- Cross-tenant migrations — staged moves where users need temporary access to both tenants
- Partner or supplier projects — close collaboration in a shared environment
🚫 Not a use case:
- “I just want to check my old work account”
- “I have a friend in another company and it’s easier this way”
- Anything that sounds like “just for now” without a documented plan
Governance Notes 📜
This group should:
- Have written customer approval for each member
- Be reviewed regularly to remove stale access
- Be empty by default in most tenants
Think of it like a secure keycard — if you’re not actively walking through that door, you shouldn’t be holding one.
💡 SuperVision Tip
SuperVision can:
- Keep this group’s name consistent across all tenants
- Let you manage membership centrally without editing the Intune policy
- Automatically remove users when a project or migration ends
Final Thoughts 🔚
Exception groups are like sharp tools — they’re great in the right hands, but dangerous if left lying around.
Use them:
- With purpose
- With documentation
- And with a healthy dose of skepticism