Microsoft Business Premium Implementation Guide – Part 5 of 7

Part 5: Teams Security

Before we continue, let's confirm a few things:

1. All steps have been implemented from Part 4.

2. Allow users to create teams

Businesses just starting to use Teams are sometimes concerned that users can create teams and channels on their own by default. Consider requiring users to complete a training course on Teams and then adding them to the group of allowed users.
Options:
Changes Communicated:

If default isn't selected, communication to end users needs to be completed so they understand how to seek approval for creating new Teams.

3. Guest Access

Many businesses use Teams to collaborate with outside clients, suppliers, and partners beyond participating in meetings. To allow external users to fully participate in teams, enable guest access.
Options:
Changes Communicated:

If blocking guest access, company policy needs to be established on how to collaborate with external users / vendors.

4. External Chat

It is different than guest access in that it only allows users outside of the business to initiate a Teams chat. This is useful when it is desirable for employees at businesses to initiate a chat just by knowing someone’s email address; however, it may turn tricky in situations where uninvited chats are undesirable.
Options:

5. 3rd Party Cloud Storage

Teams includes the ability for users to upload and share files from cloud storage services such as DropBox, Box, and Google Drive. Some businesses may want to limit cloud storage options for their users to only use OneDrive and SharePoint.
Options:

6. Meeting Policies

Teams provides numerous customizations to the settings to further control audio/video settings, content sharing, and behavior of dial-in users.
Options:
Changes Communicated:

Click here to view the available meeting policy settings

If blocking guest access, company policy needs to be established on how to collaborate with external users / vendors.

7. Messaging Policy

Messaging policies are a set of guidelines that dictate how messages should be sent, received, and organized within Teams. Specifically, you can block/allow different content types.
Options:
Changes Communicated:

Click here to view the available messaging policy settings

If blocking guest access, company policy needs to be established on how to collaborate with external users / vendors.

8. OneDrive for Business Sharing

Consider how external users access files shared via OneDrive. Sharing files can be very useful for collaboration and by default anyone with a link to a shared file can access it.
Options:
Changes Communicated:

If sharing links to content externally is a common process, we recommend reviewing and confirming the guests within your tenant.

9. Teams App Permission Policies

Allows organizations to control what apps are available to Teams users. You can allow or block all apps or specific apps published by Microsoft, 3rd parties, or your organization.
Options:

STOP!

Let's complete the action items in this section and reconvene as soon as possible.

Our Responsibility:
Your Responsibility: