External users, such as vendors, partners or freelancers often need access to specific resources within your cloud environment.
Managing their onboarding and permissions ensures secure collaboration while adhering to principle of least privilege.
To get an external user onboard:
- Ensure your organization’s external collaboration settings allow inviting external users.
- In the Azure portal, navigate to Microsoft Entra ID > Users.
- Select New user > Invite external user.
- Follow the steps to invite the external user.
The user can either use a direct link to a shared app or accept the invitation link in their email. The external user must complete the invitation process to access your directory.
When you need to remove an external user, revoke their role assignments and delete.
It is a highly recommended security measure to configure Multi-Factor Authentication (MFA) for external users to enhance security.
You can also create policies to control external user access to specific applications.