Trying to add an external member to the team results in error: "You are not authorized"
Microsoft Teams indicates that I can add external members: "You can also add people outside your organization as guests by typing their email addresses.". However, when I try to add an external member with an Office 365 work account, I get an error message "You are not authorized".
This is a major bug. As we diagnosticated, here's what seems to happen : Teams has its own database and is synched with O365 groups. But if you invite a guest in your O365 group, and he has not yet accepted Azure invite (so pending in AzureAD), the sync does not happen and he will never be able to access Teams. So, all apis will fail ( Powershell, Flow) that uses Teams api with add-teamUser, since it uses O365 group adding in reality and not the internal Teams add user! Confusing as F***, and also, useless since you can only add guest by Teams interface!
Im not able to Enable guest access at the tenant level
For me Settings by user/license type guest not getting enabled and getting changed to business & Enterprise by default even after choosing and saving multiple times.
I have done this
Head to Settings > Services and Add-ins > Microsoft Teams
Then select Guest within the drop down for Settings by user/license type and make sure it’s turned on
Also in teams org wide settings - external access is turned on
Marc D Anderson commented
The issue for me was that I hadn’t enabled external user access in the Admin center:
“First, you must enable your Office 365 Tenant to allow guests to access a Microsoft Teams team in your tenant. This is accomplished by navigating to the Microsoft Teams settings in the Office 365 admin portal. From within the admin portal navigate to Settings -> Services & add-ins -> Microsoft Teams. On the fly-out to the right, under the section Settings by user/license type click the drop-down menu and toggle from Business and Enterprise to Guest then click On next to Turn Microsoft Teams on or off for all users of this type. Then click Save:”
Adding more info to the error would make a lot of sense.
It also struck me as unusual that this wasn’t on by default. We’ve been asking for “off by default” for new features for years and getting no joy, and then this one is off the way we want it, so we get stuck!
Pawel Bojkowski commented
The solutions for this bug is following: before adding guest account to Teams, add them to Outlook Group of that targeted Team
Trying to figure this one out too. Adding guests from another organisation, who also have Office 365 Teams, but receive this obscure "You are not authorized" message.
Marc D Anderson commented
I just ran into this as well. It is definitely confusing. At the very least, the error message should give us more to go on.
Simon Felix commented
I don't even know which company didn't give me the proper authorization. Is it my own? Or the company of the external member?