allow guest access to be turned off by default and have the ability to add guest access for individual teams.
currently if we want any team to have guest access it has to be turned on globally. we want to have it turned off by default and still have ability to allow for designated teams. currently we have to catch each team when created and turn off and then turn it on for designated teams. this is a cumbersome process.
Peter Lyon-Marrian commented
In case anyone is interested I have a bit of a workaround, although not ideal. It does involve stopping end users creating O365 groups (which back Teams), but if that is acceptable, then I wrote a guide here: https://blog.lyon-marrian.com/2019/09/microsoft-teams-guest-access-and-request-forms/ - users just need to change from creating Teams in Teams, to a central provisioning method and if a user requests a team with guest access it needs to be approved.
We confirmed with MS PS that no other viable solution is available at the time, but a simple default option for O365 guest access on team creation would solve this!
Rob zoz commented
Much needed feature!
Following a least-privilege access model, this should be the default and really surprised it isn't already. Look forward to seeing this option.