Organizations must control which teams can be invited to shared channels in Microsoft Teams. External collaboration controls reduce security risks, minimize exposure to threats, and prevent unmanaged access to critical resources.
You can use Teams policies to control shared channel creations and invitations. However, it is limited only to these three settings.
- Create shared channels
- Invite external users to shared channels
- Join external shared channels
With enabling correct "group and sites" settings while creating sensitivity labels, you gain granular control by restricting users from inviting members to specific types of labeled teams.
When creating sensitivity labels in the Microsoft Purview portal, you can choose from several options to control which teams can be invited to shared channels.
Before selecting these options, make sure to enable "Private teams discoverability and shared channel settings" checkbox under Group & sites settings.
Within these settings you can control shared channel invites with,
- Internal only: This setting prevents external teams from being invited to shared channels. It does not affect teams that were invited before the label was applied.
- Same label only: This option restricts shared channel invitations to only those teams with the same sensitivity label. Teams from other organizations or those invited prior to applying the label remain unaffected.
- Private teams only: With this setting, public teams—whether internal or external cannot be invited to shared channels. Any previously invited public teams are removed when the label is applied. If a team’s privacy setting changes from private to public, it will be removed from the shared channel. However, the channel can be shared with the parent team at any time, even if the parent team is public.
In Shared channel the host team controls permissions, compliance settings, and membership, to maintain proper governance. Shared channels don’t appear in the host team’s general list. Knowing the actual team helps provide context about the channel’s purpose, usage, and role in the organization's collaboration structure.
- To identify the host of a shared channel, use the Shared Channels Report. In the Shared Channel Type column, look for the 'Hosted Channel' value to determine which team is hosting the shared channel.