Error "Guest User Security does not appear to be enabled" when running New Collaborate Status Check

Issue

When performing a Status Check in New Collaborate, the following error is displayed:

  • There is an issue with your Guest User setup. Please check your Microsoft Guest User configuration and try again.
  • Guest User Security does not appear to be enabled. Please speak to your Microsoft 365 administrator

Note: Changes made to these settings may impact the ability for users to invite guest users to other Microsoft collaboration elements not used by FYI. If you are unsure on how to perform any of these steps please speak to your IT Professional before making any changes.

Cause

This could be caused by Azure B2B not being configured properly, or if there are additional non-standard settings in Microsoft Entra that have been configured. Refer to Setting up and Enabling Azure AD B2B for New Collaborate.

For example, a domain restriction may be configured in a Global Policy, preventing users from adding guest user accounts from specific email domains e.g. Gmail.

Solution

Step 1 - Review the Guest Invite Settings

  1. Go to the Microsoft Entra admin centre https://entra.microsoft.com and log in as the Microsoft Administrator.

  2. From the menu on the left, click the External Identities dropdown and select External collaboration settings.

  3. In the Guest invite settings section, confirm the following option has been selected:

    ➡️Member users and users assigned to specific admin roles can invite guest users including guests with member permissions.

    3027_Microsoft_entra_recommended_settings.gif
  4. Alternatively, if you want to restrict the ability to invite guest users to only specified users within the practice, you will need to enable the following setting:

    ➡️Only users assigned to specific admin roles can invite guest users

    If restricting the ability to invite guest users, you must configure the Guest Inviter role. Refer to How to restrict the ability for internal users to invite guests to SharePoint

    Important: It is not recommended to select the option "No one in the organisation can invite guests including admins (most restrictive)."

Step 2 - Check the Collaboration Restrictions

  1. On the same page (External Identities - External collaboration settings) scroll down to the Collaboration restrictions section.

  2. The settings should be set to "Allow invitations to be sent to any domain (most inclusive)" (recommended) 

    Important: It is not recommended to select the option "Allow invitations only to the specified domains (most restrictive)."

Step 3 - Re-run the Status Check

Once you have reviewed and updated the settings, re-run the New Collaborate Status Check. Refer to Checking your New Collaborate Status.

Was this article helpful?
0 out of 0 found this helpful