Skip to content

Commit 91d96c4

Browse files
authored
Update New-CsExternalAccessPolicy.md
1 parent 6ff6201 commit 91d96c4

File tree

1 file changed

+18
-8
lines changed

1 file changed

+18
-8
lines changed

teams/teams-ps/teams/New-CsExternalAccessPolicy.md

Lines changed: 18 additions & 8 deletions
Original file line numberDiff line numberDiff line change
@@ -136,7 +136,7 @@ New-CsExternalAccessPolicy -Identity GranularFederationExample -CommunicationWit
136136
Set-CsTenantFederationConfiguration -CustomizeFederation $true
137137
```
138138

139-
In this example, we create an ExternalAccessPolicy named "GranularFederationExample" that allows communication with specific external domains, namely `example1.com` and `example2.com`. The federation policy is set to restrict communication to only these allowed domains. After that, we still have to enable the `CustomizeFederation` setting in the TenantFederationConfiguration to allow the federation settings as defined in the ExternalAccessPolicy to work.
139+
In this example, we create an ExternalAccessPolicy named "GranularFederationExample" that allows communication with specific external domains, namely `example1.com` and `example2.com`. The federation policy is set to restrict communication to only these allowed domains.
140140

141141
## PARAMETERS
142142

@@ -166,7 +166,10 @@ Accept wildcard characters: False
166166
```
167167
168168
### -AllowedExternalDomains
169-
Indicates the domains that are allowed to communicate with the users of this policy. This is referenced only when `CommunicationWithExternalOrgs` is set to be `AllowSpecificExternalDomains`.
169+
> [!NOTE]
170+
> Please note that this parameter is in Private Preview.
171+
172+
Indicates the domains that are allowed to communicate with the users of this policy. This is referenced only when `CommunicationWithExternalOrgs` is set to be `AllowSpecificExternalDomains`. Only custom policies can change this setting. In Global (default) policy this setting should be default value always and is not allowed to be changed.
170173

171174
```yaml
172175
Type: List
@@ -181,7 +184,10 @@ Accept wildcard characters: False
181184
```
182185

183186
### -BlockedExternalDomains
184-
Indicates the domains that are blocked from communicating with the users of this policy. This is referenced only when `CommunicationWithExternalOrgs` is set to be `BlockSpecificExternalDomains`.
187+
> [!NOTE]
188+
> Please note that this parameter is in Private Preview.
189+
190+
Indicates the domains that are blocked from communicating with the users of this policy. This is referenced only when `CommunicationWithExternalOrgs` is set to be `BlockSpecificExternalDomains`. Only custom policies can change this setting. In Global (default) policy this setting should be default value always and is not allowed to be changed.
185191

186192
```yaml
187193
Type: List
@@ -196,14 +202,18 @@ Accept wildcard characters: False
196202
```
197203

198204
### -CommunicationWithExternalOrgs
205+
> [!NOTE]
206+
> Please note that this parameter is in Private Preview.
207+
199208
Indicates how the users get assigned by this policy can communicate with the external orgs. There are 5 options:
200209

201-
- OrganizationDefault: the users of this policy will follow the federation settings defined in TenantFederationConfiguration
202-
- AllowAllExternalDomains: the users are open to communicate with all domains
203-
- AllowSpecificExternalDomains: the users can only communicate with the users of the domains defined in `AllowedExternalDomains`
204-
- BlockSpecificExternalDomains: only users from the domains defined in `BlockedExternalDomains` are blocked from communicating with the users of this policy
205-
- BlockAllExternalDomains: the users are not able to communicate with any external domains
210+
- OrganizationDefault: the users of this policy will follow the federation settings defined in TenantFederationConfiguration.
211+
- AllowAllExternalDomains: the users are open to communicate with all domains.
212+
- AllowSpecificExternalDomains: the users can only communicate with the users of the domains defined in `AllowedExternalDomains`.
213+
- BlockSpecificExternalDomains: only users from the domains defined in `BlockedExternalDomains` are blocked from communicating with the users of this policy.
214+
- BlockAllExternalDomains: the users are not able to communicate with any external domains.
206215

216+
The setting only applies if `EnableFederationAccess` is true. Simiar to `AllowedExternalDomains` and `BlockedExternalDomains`, only custom policies can change this setting. In Global (default) policy this setting should be default value always and is not allowed to be changed.
207217
```yaml
208218
Type: String
209219
Parameter Sets: (All)

0 commit comments

Comments
 (0)