Updates from: 09/09/2023 04:12:44
Category Microsoft Docs article Related commit history on GitHub Change details
admin Restore Deleted Group https://github.com/MicrosoftDocs/microsoft-365-docs/commits/public/microsoft-365/admin/create-groups/restore-deleted-group.md
Last updated 02/18/2020
f1.keywords: CSH -+ audience: Admin
business-premium M365bp Avoid Phishing And Attacks https://github.com/MicrosoftDocs/microsoft-365-docs/commits/public/microsoft-365/business-premium/m365bp-avoid-phishing-and-attacks.md
ms.audience: Admin
Previously updated : 04/18/2023 Last updated : 09/08/2023 ms.localizationpriority: medium - M365-Campaigns
In addition to the protection Microsoft 365 Business Premium offers against atta
- **Spam or junk mail**. There are many reasons you might receive junk e-mail and not all junk mail is the same. However, you can reduce what gets through to you, and thus reduce the risks of attacks, by filtering out junk mail. - **Phishing**. A phishing scam is an email that seems legitimate but is an attempt to get your personal information or steal your money. - **Spoofing**. Scammers can also use a technique called spoofing to make it appear as if you've received an email from yourself. -- **Malware** is malicious software that can be installed on your computer, usually installed after you've clicked a link or opened a document from an email. There are various types of malware (for example, ransomware, when your computer is taken over), but you don't want to have any of them.
+- **Malware** is malicious software that can be installed on your computer after you've selected a link or opened a document from an email. There are various types of malware (for example, ransomware, when your computer is taken over), but you don't want to have any of them.
## Best practices
For more information, see [reporting junk and phishing emails](https://support.o
### Avoid phishing - Never reply to an email that asks you to send personal or account information.-- If you receive an email that looks suspicious or asks you for this type of information, never click links that supposedly take you to a company website
+- If you receive an email that looks suspicious or asks you for this type of information, never select links that supposedly take you to a company website
- Never open any file attached to a suspicious-looking email. - If the email appears to come from a company, contact the company's customer service via phone or web browser to see if the email is legitimate. - Search the web for the email subject line followed by the word hoax to see if anyone else has reported this scam.
business-premium M365bp Device Groups Mdb https://github.com/MicrosoftDocs/microsoft-365-docs/commits/public/microsoft-365/business-premium/m365bp-device-groups-mdb.md
Create device categories in Intune from which users must choose when they enroll
4. When you're done, select **Create**. You can see the new category in the list.
-Use the device category name when you create the Azure Active Directory (Azure AD) security groups. When users enroll their devices, they are presented with a list of the categories you configured in Intune. After they choose a category and finish enrollment, their device is added to the Active Directory security group that is associated with it.
+Use the device category name when you create the Azure Active Directory (Azure AD) security groups. When users enroll their devices, they're presented with a list of the categories you configured in Intune. After they choose a category and finish enrollment, their device is added to the Active Directory security group that is associated with it.
## Create dynamic device groups in Azure Active Directory
business-premium Share Files And Videos https://github.com/MicrosoftDocs/microsoft-365-docs/commits/public/microsoft-365/business-premium/share-files-and-videos.md
ms.audience: Admin
Previously updated : 09/15/2022 Last updated : 09/08/2023 ms.localizationpriority: medium - M365-Campaigns
search.appverid:
- BCS160 - MET150 - MOE150
-description: "Share files and videos inside your campaign with Microsoft Teams and SharePoint. Microsoft 365 Business premium includes Teams which is a great way to safely share files and videos."
+description: "Share files and videos inside your campaign with Microsoft Teams and SharePoint. Microsoft 365 Business premium includes Teams, which is a great way to safely share files and videos."
# Share files and videos in a safe environment
-Another thing to pay attention to is ensuring all members of the organization control who can view and edit files, and that they are stored in a secure location with the proper permissions applied. Microsoft 365 Business Premium users can use Microsoft Teams to store files, and then share the files either inside or outside of the firm, practice or campaign. You can also send a SharePoint link. Sending a link rather than an email attachment means you know who is viewing and modifying the files, and they can't be viewed or modified without permission.
+It's important to pay attention to who can view and edit files, and where those files are stored. Files should be stored in a secure location with the proper permissions applied. With Microsoft 365 Business Premium, users can use Microsoft Teams to store and share files. Alternately, you can send a SharePoint link. Sending a link rather than an email attachment helps ensure that you know who is viewing or modifying files. Files can't be viewed or modified without permissions granted, whereas email attachments are easily forwarded.
![Diagram of a Microsoft Teams window, showing Files tab and Get link on the menu.](../media/m365-democracy-teams-sharefiles.png)
With files in Microsoft Teams and SharePoint, files can also be worked on and re
Ensure your users use these methods to share files and videos securely: 1. Store files in Microsoft Teams or SharePoint, and make sure that only the people who need access to those files have them.+ 2. When you want to share, don't attach files to an email. Instead, choose **Get link** from Microsoft Teams or SharePoint and send the link in email.+ 3. To share a file externally, add the user as a guest to your team, or use SharePoint to get a secure link to share just that file.+ 4. Use Microsoft Stream to host videos you want your campaign to see.+ 5. Use Microsoft Teams or SharePoint to store video files you need your team to collaborate on or share. ## Set up
commerce Enter Your Product Key https://github.com/MicrosoftDocs/microsoft-365-docs/commits/public/microsoft-365/commerce/enter-your-product-key.md
Title: "Enter your product key for Microsoft 365 Business Standard"
+ Title: "Enter your product key for a Microsoft business product or service"
f1.keywords: - NOCSH
+- aka.ms/smbsetup
- okr_SMB - AdminSurgePortfolio - AdminTemplateSet
-description: "Learn how to redeem a Microsoft 365 Business Standard product key and activate your subscription."
Previously updated : 08/18/2023
+description: "Learn how to redeem a product key to activate or extend your Microsoft business subscription."
Last updated : 09/07/2023
-# Enter your product key for Microsoft 365 Business Standard
+# Enter your product key for a Microsoft business product or service
-Check out all of our small business content on [Small business help & learning](https://go.microsoft.com/fwlink/?linkid=2224585).
+Check out all of our small business content on [Small business help & learning](https://go.microsoft.com/fwlink/p/?linkid=2224585).
+
+A *product key* is a 25-character alphanumeric code that represents a prepaid license for a Microsoft business product or service. If you bought a Microsoft business product or service from a partner or a retail store, you use the product key to activate your new subscription. If you buy a prepaid license for a product that you already own, you can [use the product key to extend the expiration date](#extend-the-expiration-date-for-an-existing-subscription) of your subscription. You can also [use a product key to add more licenses to your subscription](licenses/buy-licenses.md#add-licenses-to-a-prepaid-subscription-by-using-a-microsoft-365-product-key).
-If you bought Microsoft 365 Business Standard from a retail store, this article helps you activate your subscription.
-
**Need something else?** - **For help with Microsoft 365 Family or Microsoft 365 Personal**, see [Using product keys with Microsoft 365](https://support.microsoft.com/office/12a5763a-d45c-4685-8c95-a44500213759).
- - **Volume licensing customer?** If you bought Microsoft 365 for business through a [Microsoft Open License Program](https://go.microsoft.com/fwlink/p/?LinkID=613298), see the article, [Enter your product key purchased from Microsoft Open](purchases-from-microsoft-open.md).
+ - **Volume licensing customer?** If you bought a Microsoft business product or service through a [Microsoft Open License Program](https://go.microsoft.com/fwlink/p/?LinkID=613298), see the article, [Enter your product key purchased from Microsoft Open](purchases-from-microsoft-open.md).
+## Before you begin
+
+If youΓÇÖre an existing customer, you must be a global or billing admin to do the tasks in this article. For more information, see [About admin roles](../admin/add-users/about-admin-roles.md).
+ ## Activate a new subscription 1. Go to <a href="https://go.microsoft.com/fwlink/p/?LinkId=839911" target="_blank">https://microsoft365.com/setupbusiness</a>.
If you bought Microsoft 365 Business Standard from a retail store, this article
6. When you're finished, go to the <a href="https://go.microsoft.com/fwlink/p/?linkid=2024339" target="_blank">Admin center</a> to manage your subscription.
-## Extend the expiration date or add a license to an existing subscription
-
-Prepaid licenses for Microsoft 365 Business Standard are issued as a 25-character alphanumeric code, called a product key. If you buy another prepaid subscription for a product you already own, you can use the product key to extend the expiration date of your subscription. You can also [use a product key to add more licenses to your subscription](licenses/buy-licenses.md#add-licenses-to-a-prepaid-subscription-by-using-a-microsoft-365-product-key).
+## Extend the expiration date for an existing subscription
-> [!NOTE]
-> You must use a new, unused product key for the same Microsoft 365 plan that you bought previously. Entering your original Microsoft 365 product key won't work because a key that has already been redeemed can't be used again.
+To extend the expiration date for your prepaid subscription, you must use a new, unused product key for the same Microsoft plan. Entering your original product key won't work because a key that has already been redeemed can't be used again.
1. Go to the <a href="https://go.microsoft.com/fwlink/p/?linkid=2024339" target="_blank">Microsoft 365 admin center</a>. - If youΓÇÖre using the **Simplified view**, select **Billing**.
commerce Buy Licenses https://github.com/MicrosoftDocs/microsoft-365-docs/commits/public/microsoft-365/commerce/licenses/buy-licenses.md
If you've removed licenses from a subscription, the next thing to do is [delete
## Add licenses to a prepaid subscription by using a Microsoft 365 product key
-Prepaid product licenses are issued to you as a 25-character alphanumeric code, called a product key. After you buy the licenses you need, you can add them to your subscription by using the steps below. You can also use a product key to [extend the expiration date of your subscription](../enter-your-product-key.md#extend-the-expiration-date-or-add-a-license-to-an-existing-subscription).
+Prepaid product licenses are issued to you as a 25-character alphanumeric code, called a product key. After you buy the licenses you need, you can add them to your subscription by using the steps below. You can also use a product key to [extend the expiration date of your subscription](../enter-your-product-key.md#extend-the-expiration-date-for-an-existing-subscription).
> [!NOTE] > If you don't want to buy a new product key, you can always choose to add a credit card or bank account to your subscription to pay for more licenses. For more information, see [Renew your subscription](../subscriptions/renew-your-subscription.md).
enterprise Join Leave Multi Tenant Org https://github.com/MicrosoftDocs/microsoft-365-docs/commits/public/microsoft-365/enterprise/join-leave-multi-tenant-org.md
Title: Join or leave a multi-tenant organization in Microsoft 365 (Preview)
+ Title: Join or leave a multitenant organization in Microsoft 365 (Preview)
search.appverid:
- MET150 f1.keywords: - NOCSH
-description: Learn how to join or leave a multi-tenant organization in Microsoft 365.
+description: Learn how to join or leave a multitenant organization in Microsoft 365.
-# Join or leave a multi-tenant organization in Microsoft 365 (Preview)
+# Join or leave a multitenant organization in Microsoft 365 (Preview)
> [!NOTE]
-> Multi-tenant organizations in Microsoft 365 is available in [targeted release](/microsoft-365/admin/manage/release-options-in-office-365).
+> Multitenant organizations in Microsoft 365 is available in [targeted release](/microsoft-365/admin/manage/release-options-in-office-365).
-To join a multi-tenant organization, a global administrator in the owner organization must first add your organization to the multi-tenant organization. Once they've done that, you can join the multi-tenant organization. You'll need the tenant ID of the owner organization in order to join.
+To join a multitenant organization, a global administrator in the owner organization must first add your organization to the multitenant organization. Once they've done that, you can join the multitenant organization. You'll need the tenant ID of the owner organization in order to join.
-Once you've joined, you can leave a multi-tenant organization at any time.
+Once you've joined, you can leave a multitenant organization at any time.
#### Related settings in Azure AD
-When you join an existing multi-tenant organization, the following settings are configured in Azure Active Directory:
+When you join an existing multitenant organization, the following settings are configured in Azure Active Directory:
- A cross-tenant synchronization configuration is added with the name *MTO_Sync_\<TenantID\>*, but no sync jobs are created yet. (If you already have a cross-tenant synchronization configuration, it remains unchanged.)-- An organization relationship is added to the [cross-tenant access settings](/azure/active-directory/external-identities/cross-tenant-access-overview) based on the [multi-tenant organization templates](/azure/active-directory/multi-tenant-organizations/templates) for cross-tenant access and identity synchronization. (If an organizational relationship already exists, the existing one is used.)-- The multi-tenant organization template for identity synchronization is set to allow users to sync into this tenant.-- The multi-tenant org template for cross-tenant access will be set to automatically redeem user invitations, inbound as well as outbound.
+- An organization relationship is added to the [cross-tenant access settings](/azure/active-directory/external-identities/cross-tenant-access-overview) based on the [multitenant organization templates](/azure/active-directory/multi-tenant-organizations/templates) for cross-tenant access and identity synchronization. (If an organizational relationship already exists, the existing one is used.)
+- The multitenant organization template for identity synchronization is set to allow users to sync into this tenant.
+- The multitenant org template for cross-tenant access will be set to automatically redeem user invitations, inbound as well as outbound.
-When you leave a multi-tenant organization, the cross-tenant access settings and cross-tenant synchronization configurations in Azure AD aren't affected.
+When you leave a multitenant organization, the cross-tenant access settings and cross-tenant synchronization configurations in Azure AD aren't affected.
-## Join an existing multi-tenant organization
+## Join an existing multitenant organization
-To join an existing multi-tenant organization in Microsoft 365
+To join an existing multitenant organization in Microsoft 365
1. In the Microsoft 365 admin center, expand **Settings**. 1. Select **Org settings**.
To join an existing multi-tenant organization in Microsoft 365
1. Select **Next**. 1. Select **Done**.
-It can take up to four hours for your tenant to be joined to the multi-tenant organization.
+It can take up to four hours for your tenant to be joined to the multitenant organization.
> [!NOTE]
-> If you encounter an error when joining the multi-tenant organization, try again after two hours. If the error reoccurs, contact Microsoft support.
+> If you encounter an error when joining the multitenant organization, try again after two hours. If the error reoccurs, contact Microsoft support.
-The next step after you join the multi-tenant organization is to synchronize your users with the other tenants. For details, see [Synchronize users in multi-tenant orgs in Microsoft 365](sync-users-multi-tenant-orgs.md).
+The next step after you join the multitenant organization is to synchronize your users with the other tenants. For details, see [Synchronize users in multitenant orgs in Microsoft 365](sync-users-multi-tenant-orgs.md).
-## Leave a multi-tenant organization
+## Leave a multitenant organization
-You can leave a multi-tenant organization as long as your tenant isn't the last owner tenant in the multi-tenant organization. You can also remove other member tenants.
+You can leave a multitenant organization as long as your tenant isn't the last owner tenant in the multitenant organization. You can also remove other member tenants.
-To remove a tenant from a multi-tenant organization in Microsoft 365
+To remove a tenant from a multitenant organization in Microsoft 365
1. In the Microsoft 365 admin center, expand **Settings**. 1. Select **Org settings**.
Removing a tenant doesn't change any user synchronization configurations or cros
#### Remove synchronized users from other tenants
-When you remove a tenant from a multi-tenant organization, you may want to stop synchronizing users between that tenant and the tenants that remain in the multi-tenant organization. This can be done by updating the cross-tenant synchronization configuration in Azure AD and removing the security groups being synchronized, then restarting the synchronization with zero users.
+When you remove a tenant from a multitenant organization, you may want to stop synchronizing users between that tenant and the tenants that remain in the multitenant organization. This can be done by updating the cross-tenant synchronization configuration in Azure AD and removing the security groups being synchronized, then restarting the synchronization with zero users.
-Cross-tenant synchronization configurations for multi-tenant organizations that were created in the Microsoft 365 admin center are named *MTO_Sync_\<TenantID\>* in Azure AD cross-tenant synchronization.
+Cross-tenant synchronization configurations for multitenant organizations that were created in the Microsoft 365 admin center are named *MTO_Sync_\<TenantID\>* in Azure AD cross-tenant synchronization.
To remove the cross-synchronized users: -- For the tenant that is leaving the multi-tenant organization, update the synchronization configurations for each remaining tenant in the multi-tenant organization where you're synchronizing users.
+- For the tenant that is leaving the multitenant organization, update the synchronization configurations for each remaining tenant in the multitenant organization where you're synchronizing users.
-- For each tenant that's remaining in the multi-tenant organization, update the synchronization configuration for the tenant that's leaving.
+- For each tenant that's remaining in the multitenant organization, update the synchronization configuration for the tenant that's leaving.
-To remove your users from other tenants in a multi-tenant organization
+To remove your users from other tenants in a multitenant organization
1. Sign in to the [Microsoft Entra admin center](https://entra.microsoft.com/) as a Global administrator. 1. Expand **Identity**, and then expand **External Identities**. 1. Select **Cross-tenant synchronization**.
Once the users have been removed from the other tenants' directories, you can st
#### Stop user sync and automatic invitation redemption
-Once you remove a tenant from a multi-tenant organization, you may want to stop user sync and automatic invitation redemption with the tenants that remain in the multi-tenant organization.
+Once you remove a tenant from a multitenant organization, you may want to stop user sync and automatic invitation redemption with the tenants that remain in the multitenant organization.
To prevent user sync and automatic invitation redemption: -- For the tenant that is leaving the multi-tenant organization, update the cross-tenant access settings for each tenant that's remaining in the multi-tenant organization.
+- For the tenant that is leaving the multitenant organization, update the cross-tenant access settings for each tenant that's remaining in the multitenant organization.
-- For each tenant that's remaining in the multi-tenant organization, update the cross-tenant access settings for the tenant that's leaving.
+- For each tenant that's remaining in the multitenant organization, update the cross-tenant access settings for the tenant that's leaving.
To prevent user sync and automatic invitation redemption 1. Sign in to the [Microsoft Entra admin center](https://entra.microsoft.com/) as a Global administrator.
For more information about cross-tenant access settings, see [Configure cross-te
[Overview: Cross-tenant access with Azure AD External Identities](/azure/active-directory/external-identities/cross-tenant-access-overview)
-[Plan for multi-tenant organizations in Microsoft 365](plan-multi-tenant-org-overview.md)
+[Plan for multitenant organizations in Microsoft 365](plan-multi-tenant-org-overview.md)
-[Set up a multi-tenant org in Microsoft 365](set-up-multi-tenant-org.md)
+[Set up a multitenant org in Microsoft 365](set-up-multi-tenant-org.md)
-[Synchronize users in multi-tenant organizations in Microsoft 365](sync-users-multi-tenant-orgs.md)
+[Synchronize users in multitenant organizations in Microsoft 365](sync-users-multi-tenant-orgs.md)
enterprise Multi Tenant People Search https://github.com/MicrosoftDocs/microsoft-365-docs/commits/public/microsoft-365/enterprise/multi-tenant-people-search.md
Title: "Microsoft 365 Multi-Tenant Organization People Search"
+ Title: "Microsoft 365 multitenant Organization People Search"
search.appverid:
- MET150 f1.keywords: - NOCSH
-description: Learn about People Search in multi-tenant Microsoft 365 organizations.
+description: Learn about People Search in multitenant Microsoft 365 organizations.
-# Microsoft 365 Multi-Tenant Organization People Search (public preview)
+# Microsoft 365 multitenant Organization People Search (public preview)
-The Multi-Tenant Organization (MTO) People Search is a collaboration feature that enables search and discovery of people across multiple tenants. A tenant admin can enable cross-tenant synchronization that will allow users to be synced to another tenant and be discoverable in its global address list. Once enabled, users will be able to search and discover synced user profiles from the other tenant and view their corresponding people cards.
+The multitenant Organization (MTO) People Search is a collaboration feature that enables search and discovery of people across multiple tenants. A tenant admin can enable cross-tenant synchronization that will allow users to be synced to another tenant and be discoverable in its global address list. Once enabled, users will be able to search and discover synced user profiles from the other tenant and view their corresponding people cards.
>[!NOTE]
->This Public Preview program is designed to give customers the opportunity to try out the multi-tenant people search feature. You can then validate the scenario and provide feedback to the product development team. The purpose of this article is to:
+>This Public Preview program is designed to give customers the opportunity to try out the multitenant people search feature. You can then validate the scenario and provide feedback to the product development team. The purpose of this article is to:
> >- Give an overview of the feature >- Define use cases that we currently support as part of the preview
Megan's user account has been synced from the _Fabrikam_ tenant to the target te
- The Microsoft Teams audio and video call buttons will direct the call to the Megan's Contoso tenant Teams instance and not the Teams instance target tenant (Fabrikam). - The current experience provides limited information on the people card (basic contact information, job title and office location). - There is no external tag to differentiate synced users and internal users. For example, if there was a megan@fabrikam and megan@Contoso there's no (External) tag to show that megan@fabrikam is a different user.-
-## External Member Limitations
--- External member isn't supported in Teams Connect shared channels.-- Converting an external guest into an external member or converting an external member into an external guest isn't currently supported by Teams. For more information, see Guest access in Microsoft Teams.-- External member isn't supported in Power BI. For more information, see Distribute Power BI content to external guest users using Azure Active Directory B2B.
+- Converting an external guest into an external member or converting an external member into an external guest isn't currently supported by Teams.
## Prerequisites
To test the MTO People Search feature, it is assumed that you already have the f
## Use Cases
-Multi-tenant organization people search is supported across a range of scenarios and Microsoft 365 applications. Some of the scenarios you can test and validate are described below:
+Multitenant organization people search is supported across a range of scenarios and Microsoft 365 applications. Some of the scenarios you can test and validate are described below:
1. **Microsoft Outlook (OWA, desktop and mobile app)**
Multi-tenant organization people search is supported across a range of scenarios
A tenant can be both home and resource tenant simultaneously. -- _Cross-Tenant synchronization_ is a feature that enables multi-tenant organizations to grant users access to applications in other tenants within the organization. It achieves this by synchronizing internal member users from a home tenant into a resource tenant as external B2B users.
+- _Cross-Tenant synchronization_ is a feature that enables multitenant organizations to grant users access to applications in other tenants within the organization. It achieves this by synchronizing internal member users from a home tenant into a resource tenant as external B2B users.
enterprise Plan Multi Tenant Org Overview https://github.com/MicrosoftDocs/microsoft-365-docs/commits/public/microsoft-365/enterprise/plan-multi-tenant-org-overview.md
Title: Plan for multi-tenant organizations in Microsoft 365 (Preview)
+ Title: Plan for multitenant organizations in Microsoft 365 (Preview)
search.appverid:
- MET150 f1.keywords: - NOCSH
-description: Learn how to plan for multi-tenant organizations in Microsoft 365.
+description: Learn how to plan for multitenant organizations in Microsoft 365.
-# Plan for multi-tenant organizations in Microsoft 365 (Preview)
+# Plan for multitenant organizations in Microsoft 365 (Preview)
> [!NOTE]
-> Multi-tenant organizations in Microsoft 365 is available in [targeted release](/microsoft-365/admin/manage/release-options-in-office-365).
+> Multitenant organizations in Microsoft 365 is available in [targeted release](/microsoft-365/admin/manage/release-options-in-office-365).
-If your organization manages multiple Microsoft 365 tenants, you can set up a multi-tenant organization in Microsoft 365 to facilitate collaboration and resource access between tenants. Creating a multi-tenant organization and synchronizing users between tenants provides a more seamless collaboration experience between the users in different tenants when [searching for each other](/microsoft-365/enterprise/multi-tenant-people-search), using Teams and meetings, and collaborating on files.
+If your organization manages multiple Microsoft 365 tenants, you can set up a multitenant organization in Microsoft 365 to facilitate collaboration and resource access between tenants. Creating a multitenant organization and synchronizing users between tenants provides a more seamless collaboration experience between the users in different tenants when [searching for each other](/microsoft-365/enterprise/multi-tenant-people-search), using Microsoft Teams and meetings, and collaborating on files.
-The tenant that creates the multi-tenant organization is known as the *owner* while other tenants that join the multi-tenant organization are known as *members*. Once the global administrator in the owner tenant creates the multi-tenant organization, they can invite member tenants. A global administrator in each member tenant can then join the multi-tenant organization.
+The tenant that creates the multitenant organization is known as the *owner* while other tenants that join the multitenant organization are known as *members*. Once the global administrator in the owner tenant creates the multitenant organization, they can invite member tenants. A global administrator in each member tenant can then join the multitenant organization.
-While you configure Microsoft 365 multi-tenant organizations in the Microsoft 365 admin center, much of the supporting infrastructure is in Azure Active Directory (Azure AD). For details about how multi-tenant organizations work in Azure AD, see [What is a multi-tenant organization in Azure Active Directory?](/azure/active-directory/multi-tenant-organizations/multi-tenant-organization-overview) and [Topologies for cross-tenant synchronization](/azure/active-directory/multi-tenant-organizations/cross-tenant-synchronization-topology).
+While you configure Microsoft 365 multitenant organizations in the Microsoft 365 admin center, much of the supporting infrastructure is in Azure Active Directory (Azure AD). For details about how multitenant organizations work in Azure AD, see [What is a multitenant organization in Azure Active Directory?](/azure/active-directory/multi-tenant-organizations/multi-tenant-organization-overview) and [Topologies for cross-tenant synchronization](/azure/active-directory/multi-tenant-organizations/cross-tenant-synchronization-topology).
## User synchronization between tenants
-Multi-tenant organizations synchronize users between tenants using Azure AD B2B collaboration users. Users from your tenant are provisioned in the other tenants in the multi-tenant organization as B2B collaboration users, but with a user type of member rather than guest. (See [What are the default user permissions in Azure Active Directory?](/azure/active-directory/fundamentals/users-default-permissions) for the differences between these roles.)
+Multitenant organizations synchronize users between tenants using Azure AD B2B collaboration users. Users from your tenant are provisioned in the other tenants in the multitenant organization as B2B collaboration users, but with a user type of member rather than guest. (See [What are the default user permissions in Azure Active Directory?](/azure/active-directory/fundamentals/users-default-permissions) for the differences between these roles.) The member user type is required by Teams in multitenant organizations.
-We recommend starting with a small set of users before rolling out to the entire organization. When you do the complete rollout, we highly recommend synchronizing all users across all tenants in your multi-tenant organization for the best user experience. However you can synchronize a subset of users if you need to, including different users to different tenants.
+We recommend starting with a small set of users before rolling out to the entire organization. When you do the complete rollout, we highly recommend synchronizing all users across all tenants in your multitenant organization for the best user experience. However you can synchronize a subset of users if you need to, including different users to different tenants.
-When you configure user synchronization in the Microsoft 365 admin center, the same users and groups are synchronized to all tenants in the multi-tenant organization. Synchronizing different users to different tenants must be configured in Azure AD.
+When you configure user synchronization in the Microsoft 365 admin center, the same users and groups are synchronized to all tenants in the multitenant organization. Synchronizing different users to different tenants must be configured in Azure AD.
Once user synchronization has been configured, you can adjust the synchronization settings, including user scope and attribute mapping, in Azure AD. (While you can create multiple cross-tenant synchronization configurations for a single external tenant, we recommend that you only use one for ease of administration.) For more information, see [Configure cross-tenant synchronization](/azure/active-directory/multi-tenant-organizations/cross-tenant-synchronization-configure). #### Existing cross-tenant synchronization configurations
-If you have existing cross-tenant synchronization configurations in Azure AD, they continue to operate after you set up a multi-tenant organization in Microsoft 365. You can continue to use these configurations to synchronize users for your Microsoft 365 multi-tenant organization. (Note that the Microsoft 365 admin center won't recognize these configurations and the outbound sync status will show as not configured.)
+If you have existing cross-tenant synchronization configurations in Azure AD, they continue to operate after you set up a multitenant organization in Microsoft 365. You can continue to use these configurations to synchronize users for your Microsoft 365 multitenant organization. (Note that the Microsoft 365 admin center won't recognize these configurations and the outbound sync status will show as not configured.)
You can synchronize users between tenants using the Microsoft 365 admin center. This will create new cross-tenant synchronization configurations in Azure AD. Both the new and previously existing configurations will run and synchronize the users that you've specified.
We recommend that you only have a single configuration to synchronize users to a
## Cross-tenant access settings in Azure AD
-When you create a new multi-tenant organization or join an existing one, the other organizations in the multi-tenant organization are added to the [Azure AD cross-tenant access settings](/azure/active-directory/external-identities/cross-tenant-access-overview) in your tenant.
+When you create a new multitenant organization or join an existing one, the other organizations in the multitenant organization are added to the [Azure AD cross-tenant access settings](/azure/active-directory/external-identities/cross-tenant-access-overview) in your tenant.
-If you already have an organizational relationship configured in Azure AD with a tenant that you're adding to a multi-tenant organization, the existing configuration is updated as follows:
+If you already have an organizational relationship configured in Azure AD with a tenant that you're adding to a multitenant organization, the existing configuration is updated as follows:
- The inbound cross-tenant sync settings are updated to allow users to sync into your tenant. - The outbound trust settings are updated so users from this tenant don't have to accept the consent prompt the first time they access the other tenant using cross-tenant synchronization, B2B collaboration, or B2B direct connect (shared channels).
We recommend that you check the B2B collaboration settings for pre-existing orga
## The new Microsoft Teams desktop client
-For the best experience in multi-tenant organizations, users need [the new Microsoft Teams desktop client](/microsoftteams/new-teams-desktop-admin). With the new Teams desktop client, users can:
+For the best experience in multitenant organizations, users need [the new Microsoft Teams desktop client](/microsoftteams/new-teams-desktop-admin). With the new Teams desktop client, users can:
-- Receive real-time notifications from all the tenants in your multi-tenant organization
+- Receive real-time notifications from all the tenants in your multitenant organization
- Participate in chats, meetings, and calls across all of the tenants without dropping from a call or meeting to switch tenants. - Set their status for each account and organization individually. - User profile card shows organization name and email address
To control which users can use the new Teams desktop client, use the Teams updat
## Trusted organizations in external access
-External access is required for chats and calls between tenants. External access for Teams and Skype for Business users in external organizations must be configured for each tenant in your multi-tenant organization and must allow the domains of all the tenants in your multi-tenant organization. Additionally, all the users that you synchronize between tenants must be enabled for external access with Teams and Skype for Business users in external organizations. For details, see [Manage external meetings and chat with people and organizations using Microsoft identities](/microsoftteams/trusted-organizations-external-meetings-chat).
+External access is required for chats and calls between tenants. External access for Teams and Skype for Business users in external organizations must be configured for each tenant in your multitenant organization and must allow the domains of all the tenants in your multitenant organization. Additionally, all the users that you synchronize between tenants must be enabled for external access with Teams and Skype for Business users in external organizations. For details, see [Manage external meetings and chat with people and organizations using Microsoft identities](/microsoftteams/trusted-organizations-external-meetings-chat).
-## Shared channels in multi-tenant organizations
+## Shared channels in multitenant organizations
-Using [shared channels in Teams](/microsoftteams/shared-channels) with other tenants in a multi-tenant organization works the same as using shared channels with any other external organization. While the organizational relationship in Azure AD is configured as part of multi-tenant organization configuration, you must still enable shared channels in Teams and configure the B2B direct connect settings in Azure AD. For details, see [Collaborate with external participants in a shared channel](/microsoft-365/solutions/collaborate-teams-direct-connect).
+Using [shared channels in Teams](/microsoftteams/shared-channels) with other tenants in a multitenant organization works the same as using shared channels with any other external organization. While the organizational relationship in Azure AD is configured as part of multitenant organization configuration, you must still enable shared channels in Teams and configure the B2B direct connect settings in Azure AD. For details, see [Collaborate with external participants in a shared channel](/microsoft-365/solutions/collaborate-teams-direct-connect).
-## Limitations for multi-tenant organizations in Microsoft 365 preview
+## Limitations for multitenant organizations in Microsoft 365 preview
-The following are limitations of the multi-tenant organizations in Microsoft 365 preview:
+The following are limitations of the multitenant organizations in Microsoft 365 preview:
-- A maximum of five tenants in the multi-tenant organization is supported.
+- A maximum of five tenants in the multitenant organization is supported.
- A maximum of 100,000 users per tenant is supported. - Teams on the web, macOS, Microsoft Teams Rooms (MTR), and VDI/AVD aren't supported. - The ability to grant or revoke permission to receive notifications from other tenants and to switch between tenants isn't supported on mobile.
The following are limitations of the multi-tenant organizations in Microsoft 365
If you want to add more than five tenants or 100,000 users per tenant, contact Microsoft support.
-For additional limitations, see [Known issues for multi-tenant organizations](/azure/active-directory/multi-tenant-organizations/multi-tenant-organization-known-issues).
+For additional limitations, see [Known issues for multitenant organizations](/azure/active-directory/multi-tenant-organizations/multi-tenant-organization-known-issues).
-## Set up or join a multi-tenant organization
+## Set up or join a multitenant organization
-To set up a new multi-tenant organization where your tenant is the owner, see [Set up a multi-tenant organization in Microsoft 365](set-up-multi-tenant-org.md).
+To set up a new multitenant organization where your tenant is the owner, see [Set up a multitenant organization in Microsoft 365](set-up-multi-tenant-org.md).
-To join an existing multi-tenant organization as a member tenant, see [Join or leave a multi-tenant organization in Microsoft 365](join-leave-multi-tenant-org.md).
+To join an existing multitenant organization as a member tenant, see [Join or leave a multitenant organization in Microsoft 365](join-leave-multi-tenant-org.md).
## Related topics [Configure cross-tenant synchronization using PowerShell or Microsoft Graph API](/azure/active-directory/multi-tenant-organizations/cross-tenant-synchronization-configure-graph)
-[Synchronize users in multi-tenant organizations in Microsoft 365](sync-users-multi-tenant-orgs.md)
+[Synchronize users in multitenant organizations in Microsoft 365](sync-users-multi-tenant-orgs.md)
enterprise Set Up Multi Tenant Org https://github.com/MicrosoftDocs/microsoft-365-docs/commits/public/microsoft-365/enterprise/set-up-multi-tenant-org.md
Title: Set up a multi-tenant org in Microsoft 365 (Preview)
+ Title: Set up a multitenant org in Microsoft 365 (Preview)
search.appverid:
- MET150 f1.keywords: - NOCSH
-description: Learn how to set up a multi-tenant org in Microsoft 365.
+description: Learn how to set up a multitenant org in Microsoft 365.
-# Set up a multi-tenant org in Microsoft 365 (Preview)
+# Set up a multitenant org in Microsoft 365 (Preview)
> [!NOTE]
-> Multi-tenant organizations in Microsoft 365 is available in [targeted release](/microsoft-365/admin/manage/release-options-in-office-365).
+> Multitenant organizations in Microsoft 365 is available in [targeted release](/microsoft-365/admin/manage/release-options-in-office-365).
-You can set up a multi-tenant organization or add tenants to an existing one in the Microsoft 365 admin center.
+You can set up a multitenant organization or add tenants to an existing one in the Microsoft 365 admin center.
-When each external tenant accepts the invitation to join the multi-tenant organization, the following settings are configured in Azure AD:
+When each external tenant accepts the invitation to join the multitenant organization, the following settings are configured in Azure AD:
- A cross-tenant synchronization configuration is added with the name *MTO_Sync_\<TenantID\>*, but no sync jobs are created yet. (If you already have a cross-tenant synchronization configuration, it remains unchanged.)-- An organization relationship is added to the [cross-tenant access settings](/azure/active-directory/external-identities/cross-tenant-access-overview) based on the [multi-tenant organization templates](/azure/active-directory/multi-tenant-organizations/templates) for cross-tenant access and identity synchronization. (If an organizational relationship already exists, the existing one is used.)-- The multi-tenant organization template for identity synchronization is set to allow users to sync into this tenant.-- The multi-tenant org template for cross-tenant access will be set to automatically redeem user invitations, inbound as well as outbound.
+- An organization relationship is added to the [cross-tenant access settings](/azure/active-directory/external-identities/cross-tenant-access-overview) based on the [multitenant organization templates](/azure/active-directory/multi-tenant-organizations/templates) for cross-tenant access and identity synchronization. (If an organizational relationship already exists, the existing one is used.)
+- The multitenant organization template for identity synchronization is set to allow users to sync into this tenant.
+- The multitenant org template for cross-tenant access will be set to automatically redeem user invitations, inbound as well as outbound.
-## Set up a new multi-tenant organization
+## Set up a new multitenant organization
-To set up a new multi-tenant org in Microsoft 365
+To set up a new multitenant org in Microsoft 365
1. In the Microsoft 365 admin center, expand **Settings**. 1. Select **Org settings**. 1. On the **Organization profile** tab, select **Multitenant collaboration**. 1. Select **Get started**. 1. Select **Create a new multitenant organization**, and then select **Next**.
-1. Type a name and description for the multi-tenant org.
+1. Type a name and description for the multitenant org.
1. Enter the tenant IDs of any tenants that you want to invite to this org. 1. Select **Next**. 1. Select the **Allow users to sync into this tenant from the other tenants in this multitenant organization** and **Suppress consent prompts for users from the other tenant when they access apps and resources in my tenant** check boxes. 1. Select **Create multitenant organization**.
-1. Copy the instructions for joining the multi-tenant org and email them to a global administrator in each of the orgs you invited.
+1. Copy the instructions for joining the multitenant org and email them to a global administrator in each of the orgs you invited.
1. Select **Done**.
-The next step after each external tenant accepts the invitation to join the multi-tenant organization is to synchronize your users with the other tenants. For details, see [Synchronize users in multi-tenant orgs in Microsoft 365](sync-users-multi-tenant-orgs.md).
+The next step after each external tenant accepts the invitation to join the multitenant organization is to synchronize your users with the other tenants. For details, see [Synchronize users in multitenant orgs in Microsoft 365](sync-users-multi-tenant-orgs.md).
-## Add a tenant to your multi-tenant organization
+## Add a tenant to your multitenant organization
-To add a tenant to your multi-tenant organization
+To add a tenant to your multitenant organization
1. In the Microsoft 365 admin center, expand **Settings**. 1. Select **Org settings**. 1. On the **Organization profile** tab, select **Multitenant collaboration**. 1. Select **Add new tenants**. 1. Enter the tenant IDs of the tenants you want to add, and then select **Add tenant**.
-1. Copy the instructions for joining the multi-tenant org and email them to a global administrator in each of the orgs you invited.
+1. Copy the instructions for joining the multitenant org and email them to a global administrator in each of the orgs you invited.
1. Select **Done**.
-The next step after each external tenant accepts the invitation to join the multi-tenant organization is to synchronize your users with the other tenants. For details, see [Synchronize users in multi-tenant orgs in Microsoft 365](sync-users-multi-tenant-orgs.md).
+The next step after each external tenant accepts the invitation to join the multitenant organization is to synchronize your users with the other tenants. For details, see [Synchronize users in multitenant orgs in Microsoft 365](sync-users-multi-tenant-orgs.md).
## Related topics
-[Set up a multi-tenant organization using Microsoft Graph API](/azure/active-directory/multi-tenant-organizations/configure-graph#step-2-create-a-multi-tenant-organization)
+[Set up a multitenant organization using Microsoft Graph API](/azure/active-directory/multi-tenant-organizations/configure-graph#step-2-create-a-multi-tenant-organization)
-[Plan for multi-tenant organizations in Microsoft 365](plan-multi-tenant-org-overview.md)
+[Plan for multitenant organizations in Microsoft 365](plan-multi-tenant-org-overview.md)
-[Join or leave a multi-tenant organization in Microsoft 365](join-leave-multi-tenant-org.md)
+[Join or leave a multitenant organization in Microsoft 365](join-leave-multi-tenant-org.md)
-[Synchronize users in multi-tenant organizations in Microsoft 365](sync-users-multi-tenant-orgs.md)
+[Synchronize users in multitenant organizations in Microsoft 365](sync-users-multi-tenant-orgs.md)
enterprise Sync Users Multi Tenant Orgs https://github.com/MicrosoftDocs/microsoft-365-docs/commits/public/microsoft-365/enterprise/sync-users-multi-tenant-orgs.md
Title: Synchronize users in multi-tenant organizations in Microsoft 365 (Preview)
+ Title: Synchronize users in multitenant organizations in Microsoft 365 (Preview)
search.appverid:
- MET150 f1.keywords: - NOCSH
-description: Learn how to manage user sync in multi-tenant organizations in Microsoft 365.
+description: Learn how to manage user sync in multitenant organizations in Microsoft 365.
-# Synchronize users in multi-tenant organizations in Microsoft 365 (Preview)
+# Synchronize users in multitenant organizations in Microsoft 365 (Preview)
> [!NOTE]
-> Multi-tenant organizations in Microsoft 365 is available in [targeted release](/microsoft-365/admin/manage/release-options-in-office-365).
+> Multitenant organizations in Microsoft 365 is available in [targeted release](/microsoft-365/admin/manage/release-options-in-office-365).
For users in your tenant to be able to collaborate with those in other tenants, you must synchronize your users to the other tenants.
We recommend that you [set up security groups in Azure AD](/azure/active-directo
There are two ways to set up user synchronization: -- Share your users with other tenants in a multi-tenant organization by using the Microsoft 365 admin center (covered in this article)
+- Share your users with other tenants in a multitenant organization by using the Microsoft 365 admin center (covered in this article)
- [Configure user synchronization in Azure AD](/azure/active-directory/multi-tenant-organizations/cross-tenant-synchronization-configure) Both methods use cross-tenant synchronization in Azure AD.
-If you want to synchronize the same users with all the other tenants in a multi-tenant organization, we recommend sharing users in the Microsoft 365 admin center. This will create the necessary configurations in Azure AD for you.
+If you want to synchronize the same users with all the other tenants in a multitenant organization, we recommend sharing users in the Microsoft 365 admin center. This will create the necessary configurations in Azure AD for you.
If you want to synchronize different users to different tenants, then you must configure cross-tenant synchronization directly in Azure AD.
If you have issues with user synchronization check the [provisioning logs in Azu
## User property synchronization
-When you set up user synchronization with another tenant in a multi-tenant organization, the following user properties are synchronized:
+When you set up user synchronization with another tenant in a multitenant organization, the following user properties are synchronized:
|Property|Property| |:-|:-|
You can change the properties that are synchronized after the synchronization ha
## Users synchronized to your tenant from other tenants
-Users synchronized to your tenant from other tenants in your multi-tenant organization are synchronized as [Azure AD members rather than guests](/azure/active-directory/external-identities/user-properties).
+Users synchronized to your tenant from other tenants in your multitenant organization are synchronized as [Azure AD members rather than guests](/azure/active-directory/external-identities/user-properties).
As members, people from other tenants have a more seamless collaboration experience. This includes access to files using [*people in your organization* sharable links](/sharepoint/shareable-links-anyone-specific-people-organization). (Consider using [sensitivity labels](/purview/sensitivity-labels) if you need to limit who can access a file with a *people in your organization* link.) If some people from the other tenant already have guest accounts in your directory, the synchronization process doesn't change their user type to member. You can change these users' user type to member by [updating the user properties in Azure AD](/azure/active-directory/fundamentals/how-to-manage-user-profile-info).
-## Set up initial user synchronization for a multi-tenant organization
+## Set up initial user synchronization for a multitenant organization
-To synchronize identities to other tenants in a multi-tenant organization
+To synchronize identities to other tenants in a multitenant organization
1. In the Microsoft 365 admin center, expand **Settings**. 1. Select **Org settings**.
To synchronize identities to other tenants in a multi-tenant organization
1. Choose the security group that you created, and then select **Save**. 1. Select **Yes** to confirm.
-This creates a cross-tenant synchronization configuration in Azure AD for each tenant in your multi-tenant organization. The synchronization configurations are named *MTO_Sync_\<TenantID\>*.
+This creates a cross-tenant synchronization configuration in Azure AD for each tenant in your multitenant organization. The synchronization configurations are named *MTO_Sync_\<TenantID\>*.
## Set up user synchronization with newly added tenants
-If you add additional tenants to your multi-tenant organization, you need to set up user synchronization with those tenants.
+If you add additional tenants to your multitenant organization, you need to set up user synchronization with those tenants.
To set up user synchronization with newly added tenants
To set up user synchronization with newly added tenants
## Change which users are synchronized with other tenants
-You can change which users are synchronized to other tenants in your multi-tenant organization.
+You can change which users are synchronized to other tenants in your multitenant organization.
To change which users are synchronized to other tenants
To change which users are synchronized to other tenants
1. Update the users and groups that you want to sync to other tenants and then select **Save**. 1. Select **Yes** to confirm.
-This procedure updates the *MTO_Sync_\<TenantID\>* synchronization configurations in Azure AD for each tenant in your multi-tenant organization.
+This procedure updates the *MTO_Sync_\<TenantID\>* synchronization configurations in Azure AD for each tenant in your multitenant organization.
## Related topics
-[Troubleshooting tips for multi-tenant organizations](/azure/active-directory/multi-tenant-organizations/cross-tenant-synchronization-configure#troubleshooting-tips)
+[Troubleshooting tips for multitenant organizations](/azure/active-directory/multi-tenant-organizations/cross-tenant-synchronization-configure#troubleshooting-tips)
[Known issues for provisioning in Azure Active Directory](/azure/active-directory/app-provisioning/known-issues?pivots=cross-tenant-synchronization)
-[Plan for multi-tenant organizations in Microsoft 365](plan-multi-tenant-org-overview.md)
+[Plan for multitenant organizations in Microsoft 365](plan-multi-tenant-org-overview.md)
-[Set up a multi-tenant org in Microsoft 365](set-up-multi-tenant-org.md)
+[Set up a multitenant org in Microsoft 365](set-up-multi-tenant-org.md)
-[Join or leave a multi-tenant organization in Microsoft 365](join-leave-multi-tenant-org.md)
+[Join or leave a multitenant organization in Microsoft 365](join-leave-multi-tenant-org.md)
[Scoping users or groups to be provisioned with scoping filters](/azure/active-directory/app-provisioning/define-conditional-rules-for-provisioning-user-accounts?pivots=cross-tenant-synchronization)
solutions Collaborate Guests Cross Cloud https://github.com/MicrosoftDocs/microsoft-365-docs/commits/public/microsoft-365/solutions/collaborate-guests-cross-cloud.md
Note that tenants in Microsoft Azure Government (Microsoft 365 GCC High and DoD)
> [!NOTE] > Cross-cloud guest access between Microsoft 365 China (21Vianet) and other Microsoft 365 cloud environments is not supported during the preview.
+> [!NOTE]
+> VDI clients aren't supported for cross-cloud guests.
+ > [!IMPORTANT] > The organization that you're collaborating with must also configure these settings for their organization.
syntex Trial Syntex https://github.com/MicrosoftDocs/microsoft-365-docs/commits/public/microsoft-365/syntex/trial-syntex.md
description: Learn how to plan, sign up, and run a trial pilot program for Micro
# Run a trial of Microsoft Syntex > [!NOTE]
-> This article is currently being updated for pay-as-you-go trials. The article will describe how to set up and run a trial pilot program to deploy Microsoft Syntex in your organization. Per-user trials are no longer available.
+> This article is currently being updated as Microsoft SYntex seat licenses and trials are no longer available. Once updated, this article will describe how to set up and run a proof of concept for Syntex using pay-as-you-go licensing.
<! This article describes how to set up and run a trial pilot program to deploy Microsoft Syntex in your organization. It also recommends best practices for the trial.
If you don't purchase licenses following the trial:
[Get started driving adoption of Microsoft Syntex](adoption-getstarted.md)
-[Scenarios and use cases for Microsoft Syntex](adoption-scenarios.md)>
+[Scenarios and use cases for Microsoft Syntex](adoption-scenarios.md)>
test-base Faq https://github.com/MicrosoftDocs/microsoft-365-docs/commits/public/microsoft-365/test-base/faq.md
We always work closely with our customers in joint remediation to resolve any is
**A:** The goal of Test Base is to ensure our joint end customers do not face any issues. We work hard with Software Vendors to address any issues before the release, but in case the fix is not feasible we have other resolutions such as shims and blocks.
+## Security
+
+**Q: Where are my packages and binaries stored and what security precautions do you take to keep my data safe?**
+
+**A:** Packages are uploaded and stored in Microsoft-managed Azure cloud storage. The data is encrypted in transit and at rest. When the system gets notified that one of your packages needs to be tested, a dedicated and isolated Microsoft-managed Azure Guest VM is provisioned with the OS image you selected. This VM lives within our Microsoft tenant and is provisioned within its own VNet/private subnet to prevent any lateral moves from any other Azure VM in our VM pool. The VM is configured to disallow any inbound traffic to protect the integrity of the Guest VM. In addition to these guardrails, your Test Base account and packages are uploaded as Azure resources and benefit from Azure RBAC. You can use Azure AD plus Azure RBAC to control access to your account and packages.
+
+**Q: Who has access to the VM?**
+
+**A:** Only our backend services can access the Microsoft-managed VMs that run your workloads. These VMs are configured to disallow any inbound traffic, including remote connections, to protect the integrity of the VM.
+ ## Miscellaneous **Q: How will the service work with an on-prem server?**