Office 365 inter-tenant collaboration: Exchange
Nick Ross · Updated
As an MSP, you may want to allow your clients to collaborate with outside organizations to work on projects or share documentation. Additionally, you may want to share internal dcuments and with your clients and have access to some of their informaiton. This article is part of a 5 article series that will explain the ways we can use Office 365 for Inter-tenant collaboration. This article will be focusing on Exchange Online.
Goals of Inter-Tenant Collaboration
- Central location for files and conversations
- Sharing Of Calendars
- Using IM
- Audio/video calls for communication
- Securing access to resources and applications
Exchange Online Collaboration Options
Defining Polcies
Business to-Business
Set Up by Creating Organization Relationships
User-to-User (opens in new tab)
Set Up by Creating Sharing Policies
Default Sharing Policies
By Default:
-There is no Organization Relationship set up
-Users Can Share free/busy info with external users
-Users are allowed to send access to their calendars to anonymous users with email invitation
Modifying/Creating New Default Sharing Polices
In the Admin Portal
The first option is going to the Admin portal and going to Settings>Services & Add-Ins
Calendar Settings
You can then select “Calendar” to view the Default settings
Go to Exchange Admin Center
To define more granular policies, go to Admin Centers>Exchange Admin Center
Go to Organization Tab
Click on Organization on the left-hand size to view/add new sharing policies
Define the policy
You have the option to:
-Share free/busy with time only
-Share free/busy with time, subject, and location
-Share All Info including time, subject, location, and title
Creating a New Organizational Relationship
In the Exchange Admin Center
Creating an organization relationship can be done in the same place we were creating an Individual sharing policy
Define Policy
Choose your settings and external domains you want to create a relationship with
Choose Groups of Users
You can choose groups of users that have the ability to share with this organization
Spread the word and Add Your Best Practices Below!
Harden it once, then know it stays that way.
CloudCapsule scans 300+ Microsoft 365 security controls in about a minute, shows what to fix first, fixes findings at scale, and flags drift the day a setting changes.
No credit card required. Results in < 2 minutes.
Keep reading
Ditch the VPN: How Microsoft’s Global Secure Access is Changing Remote Connectivity
2025 has been a rough year for VPNs. We’ve seen breaches at major vendors, clunky user experiences, and a constant flood of helpdesk tickets from frustrated users. Yet, many businesses still rely on VPNs because their legacy line-of-business applications and on-prem file shares haven’t made the move to the cloud. But what if you could […]
Vendor Integrations will Break with GDAP
Checkout my latest article on this topic here!: Vendor Integrations Break with GDAP: The Fix! – (tminus365.com) Note This article assumes you have knowledge of GDAP (Granular Delegated Admin Privileges). If you do not, check out my article here: https://tminus365.com/granular-delegated-admin-privileges/ × Dismiss alert If you have a vendor that leverages an app registration or are […]
Leveraging PIM with GDAP
In my previous blog post, I talked about the major considerations when adding roles for GDAP relationships. In some instances, you may want to bump up security a step further and pair GDAP with PIM or privileged identity management. This would allow you to have just in time access to customer workloads for users in […]