You signed in with another tab or window. Reload to refresh your session.You signed out in another tab or window. Reload to refresh your session.You switched accounts on another tab or window. Reload to refresh your session.Dismiss alert
@@ -124,15 +139,17 @@ In this example, we create an ExternalAccessPolicy named "GranularFederationExam
124
139
## PARAMETERS
125
140
126
141
### -Identity
127
-
Unique Identity to be assigned to the policy.
128
-
New external access policies can be created at the site or per-user scope.
142
+
Unique Identity to be assigned to the policy. New external access policies can be created at the site or per-user scope.
143
+
129
144
To create a new site policy, use the prefix "site:" and the name of the site as your Identity.
145
+
130
146
For example, use this syntax to create a new policy for the Redmond site: `-Identity site:Redmond.`
147
+
131
148
To create a new per-user policy, use an Identity similar to this: `-Identity SalesAccessPolicy.`
132
149
133
150
Note that you cannot create a new global policy; if you want to make changes to the global policy, use the Set-CsExternalAccessPolicy cmdlet instead.
134
-
Likewise, you cannot create a new site or per-user policy if a policy with that Identity already exists.
135
-
If you need to make changes to an existing policy, use the Set-CsExternalAccessPolicy cmdlet.
151
+
152
+
Likewise, you cannot create a new site or per-user policy if a policy with that Identity already exists. If you need to make changes to an existing policy, use the Set-CsExternalAccessPolicy cmdlet.
Enables administrators to provide explanatory text to accompany the policy.
151
-
For example, the Description might include information about the users the policy should be assigned to.
166
+
### -AllowedExternalDomains
167
+
Indicates the domains that are allowed to communicate with the users of this policy. This is referenced only when `CommunicationWithExternalOrgs` is set to be `AllowSpecificExternalDomains`.
152
168
153
169
```yaml
154
-
Type: String
170
+
Type: List
155
171
Parameter Sets: (All)
156
172
Aliases:
157
-
173
+
Applicable: Lync Server 2010, Lync Server 2013, Skype for Business Server 2015, Skype for Business Server 2019
158
174
Required: False
159
175
Position: Named
160
176
Default value: None
161
177
Accept pipeline input: False
162
178
Accept wildcard characters: False
163
179
```
164
180
165
-
### -EnableFederationAccess
166
-
Indicates whether the user is allowed to communicate with people who have SIP accounts with a federated organization.
167
-
Read [Manage external access in Microsoft Teams](/microsoftteams/manage-external-access) to get more information about the effect of this parameter in Microsoft Teams.
168
-
The default value is True.
169
-
170
-
```yaml
171
-
Type: Boolean
172
-
Parameter Sets: (All)
173
-
Aliases:
174
-
175
-
Required: False
176
-
Position: Named
177
-
Default value: True
178
-
Accept pipeline input: False
179
-
Accept wildcard characters: False
180
-
```
181
-
182
-
### -FederatedBilateralChats
183
-
This setting enables bi-lateral chats for the users included in the messaging policy.
181
+
### -BlockedExternalDomains
182
+
Indicates the domains that are blocked from communicating with the users of this policy. This is referenced only when `CommunicationWithExternalOrgs` is set to be `BlockSpecificExternalDomains`.
184
183
185
184
```yaml
186
-
Type: Boolean
185
+
Type: List
187
186
Parameter Sets: (All)
188
187
Aliases:
189
-
188
+
Applicable: Lync Server 2010, Lync Server 2013, Skype for Business Server 2015, Skype for Business Server 2019
190
189
Required: False
191
190
Position: Named
192
-
Default value: True
191
+
Default value: None
193
192
Accept pipeline input: False
194
193
Accept wildcard characters: False
195
194
```
196
195
197
196
### -CommunicationWithExternalOrgs
198
197
Indicates how the users get assigned by this policy can communicate with the external orgs. There are 5 options:
199
-
* OrganizationDefault: the users of this policy will follow the federation settings defined in TenantFederationConfiguration
200
-
* AllowAllExternalDomains: the users are open to communicate with all domains
201
-
* AllowSpecificExternalDomains: the users can only communicate with the users of the domains defined in `AllowedExternalDomains`
202
-
* BlockSpecificExternalDomains: only users from the domains defined in `BlockedExternalDomains` are blocked from communicating with the users of this policy
203
-
* BlockAllExternalDomains: the users are not able to communicate with any external domains
198
+
199
+
- OrganizationDefault: the users of this policy will follow the federation settings defined in TenantFederationConfiguration
200
+
- AllowAllExternalDomains: the users are open to communicate with all domains
201
+
- AllowSpecificExternalDomains: the users can only communicate with the users of the domains defined in `AllowedExternalDomains`
202
+
- BlockSpecificExternalDomains: only users from the domains defined in `BlockedExternalDomains` are blocked from communicating with the users of this policy
203
+
- BlockAllExternalDomains: the users are not able to communicate with any external domains
Indicates the domains that are allowed to communicate with the users of this policy. This is referenced only when `CommunicationWithExternalOrgs` is set to be `AllowSpecificExternalDomains`
217
+
### -Confirm
218
+
Prompts you for confirmation before executing the command.
219
+
218
220
```yaml
219
-
Type: List
221
+
Type: SwitchParameter
220
222
Parameter Sets: (All)
221
-
Aliases:
222
-
Applicable: Lync Server 2010, Lync Server 2013, Skype for Business Server 2015, Skype for Business Server 2019
223
+
Aliases: cf
224
+
223
225
Required: False
224
226
Position: Named
225
227
Default value: None
226
228
Accept pipeline input: False
227
229
Accept wildcard characters: False
228
230
```
229
231
230
-
### -BlockedExternalDomains
231
-
Indicates the domains that are blocked from communicating with the users of this policy. This is referenced only when `CommunicationWithExternalOrgs` is set to be `BlockSpecificExternalDomains`
232
+
### -Description
233
+
Enables administrators to provide explanatory text to accompany the policy.
234
+
For example, the Description might include information about the users the policy should be assigned to.
235
+
232
236
```yaml
233
-
Type: List
237
+
Type: String
234
238
Parameter Sets: (All)
235
239
Aliases:
236
-
Applicable: Lync Server 2010, Lync Server 2013, Skype for Business Server 2015, Skype for Business Server 2019
240
+
237
241
Required: False
238
242
Position: Named
239
243
Default value: None
240
244
Accept pipeline input: False
241
245
Accept wildcard characters: False
242
246
```
243
247
244
-
### -EnableTeamsConsumerAccess
245
-
(Microsoft Teams Only) Indicates whether the user is allowed to communicate with people who have who are using Teams with an account that's not managed by an organization.
248
+
### -EnableAcsFederationAccess
249
+
Indicates whether Teams meetings organized by the user can be joined by users of customer applications built using Azure Communication Services (ACS). This policy setting only applies if ACS Teams federation has been enabled at the tenant level using the cmdlet Set-CsTeamsAcsFederationConfiguration. Additionally, Azure Communication Services users would be able to call Microsoft 365 users that have assigned policies with enabled federation.
246
250
247
-
To enable just for a selected set of users, use the Set-CsExternalAccessPolicy cmdlet to update the global policy, setting the value to False. Then assign selected users a policy with federation enabled.
251
+
To enable for all users, use the Set-CsExternalAccessPolicy cmdlet to update the global policy, setting the value to True. It can be disabled for selected users by assigning them a policy with federation disabled.
248
252
249
-
Read [Manage external access in Microsoft Teams](/microsoftteams/manage-external-access) to get more information about the effect of this parameter in Microsoft Teams.
250
-
The default value is True.
253
+
To enable just for a selected set of users, use the Set-CsExternalAccessPolicy cmdlet to update the global policy, setting the value to False. Then assign selected users a policy with federation enabled.
251
254
252
255
```yaml
253
256
Type: Boolean
254
257
Parameter Sets: (All)
255
258
Aliases:
259
+
Applicable: Microsoft Teams
256
260
Required: False
257
261
Position: Named
258
262
Default value: True
259
263
Accept pipeline input: False
260
264
Accept wildcard characters: False
261
265
```
262
266
263
-
### -EnableTeamsConsumerInbound
264
-
(Microsoft Teams Only) Indicates whether the user is allowed to be discoverable by people who are using Teams with an account that's not managed by an organization. It also controls if people who have who are using Teams with an account that's not managed by an organization can start the communication with the user.
265
-
266
-
To enable just for a selected set of users, use the Set-CsExternalAccessPolicy cmdlet to update the global policy, setting the value to False. Then assign selected users a policy with federation enabled.
267
-
267
+
### -EnableFederationAccess
268
+
Indicates whether the user is allowed to communicate with people who have SIP accounts with a federated organization.
268
269
Read [Manage external access in Microsoft Teams](/microsoftteams/manage-external-access) to get more information about the effect of this parameter in Microsoft Teams.
269
270
The default value is True.
270
271
271
272
```yaml
272
273
Type: Boolean
273
274
Parameter Sets: (All)
274
275
Aliases:
275
-
Required: False
276
-
Position: Named
277
-
Default value: True
278
-
Accept pipeline input: False
279
-
Accept wildcard characters: False
280
-
```
281
276
282
-
### -EnableAcsFederationAccess
283
-
Indicates whether Teams meetings organized by the user can be joined by users of customer applications built using Azure Communication Services (ACS). This policy setting only applies if ACS Teams federation has been enabled at the tenant level using the cmdlet Set-CsTeamsAcsFederationConfiguration. Additionally, Azure Communication Services users would be able to call Microsoft 365 users that have assigned policies with enabled federation.
284
-
285
-
To enable for all users, use the Set-CsExternalAccessPolicy cmdlet to update the global policy, setting the value to True. It can be disabled for selected users by assigning them a policy with federation disabled.
286
-
287
-
To enable just for a selected set of users, use the Set-CsExternalAccessPolicy cmdlet to update the global policy, setting the value to False. Then assign selected users a policy with federation enabled.
Suppresses the display of any non-fatal error message that might occur when running the command.
333
+
### -EnableTeamsConsumerAccess
334
+
(Microsoft Teams Only) Indicates whether the user is allowed to communicate with people who have who are using Teams with an account that's not managed by an organization.
335
+
336
+
To enable just for a selected set of users, use the Set-CsExternalAccessPolicy cmdlet to update the global policy, setting the value to False. Then assign selected users a policy with federation enabled.
337
+
338
+
Read [Manage external access in Microsoft Teams](/microsoftteams/manage-external-access) to get more information about the effect of this parameter in Microsoft Teams.
339
+
The default value is True.
352
340
353
341
```yaml
354
-
Type: SwitchParameter
342
+
Type: Boolean
355
343
Parameter Sets: (All)
356
344
Aliases:
345
+
Required: False
346
+
Position: Named
347
+
Default value: True
348
+
Accept pipeline input: False
349
+
Accept wildcard characters: False
350
+
```
351
+
352
+
### -EnableTeamsConsumerInbound
353
+
(Microsoft Teams Only) Indicates whether the user is allowed to be discoverable by people who are using Teams with an account that's not managed by an organization. It also controls if people who have who are using Teams with an account that's not managed by an organization can start the communication with the user.
354
+
355
+
To enable just for a selected set of users, use the Set-CsExternalAccessPolicy cmdlet to update the global policy, setting the value to False. Then assign selected users a policy with federation enabled.
356
+
357
+
Read [Manage external access in Microsoft Teams](/microsoftteams/manage-external-access) to get more information about the effect of this parameter in Microsoft Teams.
358
+
The default value is True.
357
359
360
+
```yaml
361
+
Type: Boolean
362
+
Parameter Sets: (All)
363
+
Aliases:
358
364
Required: False
359
365
Position: Named
360
-
Default value: None
366
+
Default value: True
361
367
Accept pipeline input: False
362
368
Accept wildcard characters: False
363
369
```
364
370
365
-
### -InMemory
366
-
Creates an object reference without actually committing the object as a permanent change.
367
-
If you assign the output of this cmdlet called with this parameter to a variable, you can make changes to the properties of the object reference and then commit those changes by calling this cmdlet's matching Set-\<cmdlet\>.
371
+
### -EnableXmppAccess
372
+
Indicates whether the user is allowed to communicate with users who have SIP accounts with a federated XMPP (Extensible Messaging and Presence Protocol) partner.
Indicates whether the user is allowed to communicate with users who have SIP accounts with a federated XMPP (Extensible Messaging and Presence Protocol) partner.
413
-
The default value is False.
417
+
### -InMemory
418
+
Creates an object reference without actually committing the object as a permanent change.
419
+
If you assign the output of this cmdlet called with this parameter to a variable, you can make changes to the properties of the object reference and then commit those changes by calling this cmdlet's matching Set-\<cmdlet\>.
414
420
415
421
```yaml
416
-
Type: Boolean
422
+
Type: SwitchParameter
417
423
Parameter Sets: (All)
418
424
Aliases:
419
425
@@ -446,6 +452,21 @@ Accept pipeline input: False
446
452
Accept wildcard characters: False
447
453
```
448
454
455
+
### -WhatIf
456
+
Describes what would happen if you executed the command without actually executing the command.
457
+
458
+
```yaml
459
+
Type: SwitchParameter
460
+
Parameter Sets: (All)
461
+
Aliases: wi
462
+
463
+
Required: False
464
+
Position: Named
465
+
Default value: None
466
+
Accept pipeline input: False
467
+
Accept wildcard characters: False
468
+
```
469
+
449
470
### CommonParameters
450
471
This cmdlet supports the common parameters: `-Debug, -ErrorAction, -ErrorVariable, -InformationAction, -InformationVariable, -OutVariable, -OutBuffer, -PipelineVariable, -Verbose, -WarningAction, and -WarningVariable. For more information, see about_CommonParameters (https://go.microsoft.com/fwlink/?LinkID=113216).`
0 commit comments