How to add external users to SharePoint
Sometimes your best work happens with people outside your organization – partners, clients or vendors. SharePoint makes that possible through external sharing.
In this guide, we’ll show you exactly how to add an external user to SharePoint, explain permission levels (Owner, Member, Visitor), and share best practices to keep your content secure and collaboration smooth.
Before you begin, it helps to understand what each role means:
- Owner: Manages the site, controls permissions and can add or remove content and users.
- Member: Uploads, edits and collaborates on documents and pages.
- Visitor: Views and reads content without making changes.
These roles make it easy to control who can do what, so you can keep teamwork flowing while maintaining security.
Why share with external users on SharePoint
Today’s projects rarely happen in isolation. Most of us work with agencies, clients or suppliers who need quick, reliable access to the same information we do. That is where SharePoint’s external sharing feature becomes a real advantage.
By inviting trusted people into your SharePoint environment, you can collaborate in real time and cut down on the back and forth of email attachments. Everyone works from the same version of every document and updates are visible instantly.
At the same time, SharePoint keeps you firmly in control. You decide exactly who can see or change what, ensuring sensitive content stays protected. It is collaboration without compromise.
How to add an external user to SharePoint
Once you understand the value of external sharing, the next step is to set it up properly. SharePoint makes this straightforward, but it is worth getting the permissions and settings right the first time.
Before you start, make sure external sharing is enabled for your organization. Your Microsoft 365 or SharePoint admin may need to switch it on.
Step 1: Enable external sharing (if it is disabled)
Depending on your setup, you can turn on external sharing in the Microsoft 365 Admin Center or the SharePoint Admin Center.
Through Microsoft 365 admin center
Choose how your users can share SharePoint sites within your organization:
- Go to Settings > Org Settings > Security & Privacy > Sharing.
- Click on > Change the external sharing settings for SharePoint.
- Configure who users can share with:
- Anyone (anonymous access)
- New and existing guests: Choose to share with new guest users or existing ones
- Existing guests only
- Only people in your organization (disables external sharing)
Through SharePoint admin center
Control sharing at organization level in SharePoint:
- Visit admin.microsoft.com/sharepoint.
- In the left-hand menu, go to Policies > Sharing to set the organization-level sharing settings for SharePoint, and choose the appropriate level.
- Then go to Sites > Active Sites.
- Choose the site you want to configure.
- Click Sharing and set it to New and existing guests.
Step 2: Invite the external user
Now that sharing is active, it is time to invite the person or people you want to collaborate with:
- Open your SharePoint site.
- Click the Settings (gear) icon and select Site Permissions.
- Choose Share site.
- Enter the email address of the external user.
- Choose their permission level:
- Owner: Full control over the site.
- Member: Can add, edit, and collaborate on documents.
- Visitor: Read-only access.
- Click Add.
The external user will receive an email invitation. Once they accept, they can sign in to the site.
Fresh, an intranet solution built in SharePoint, supports external user access and benefits from Microsoft’s external user management capabilities.
Best practices for external sharing on SharePoint
Inviting external users is easy but managing them well takes a little planning. Treat external sharing like an extension of your internal security policy.
Here are some habits that will help you stay in control:
- Share with intent. Only invite users who truly need access.
- Set clear permissions. Keep confidential content internal.
- Review access regularly. Audit user permissions every few months.
- Monitor pending invites. Check under Settings > Site Settings > Access requests and invitations.
- Train your team. Make sure everyone knows the dos and don’ts of sharing externally.
Taking a few minutes to manage permissions now can save hours of troubleshooting later.
Advanced settings and security considerations
For organizations that collaborate frequently or handle sensitive data, SharePoint offers deeper configuration options to tighten control and meet compliance requirements.
These features help you share smarter:
- Restrict sharing to trusted domains. Allow or block specific domains to limit who can be invited, for example only partnercompany.com.
- Set guest access expiration. Automatically remove access after a set number of days. You can always renew access later.
- Use dedicated external sites. Create specific sites for partner collaboration instead of opening internal ones.
- Understand guest sign-in. If a guest does not have a Microsoft account, they will use a secure one-time passcode to sign in.
- Check both tenant and site settings. Your site cannot share externally if the tenant setting does not allow it.
- Layer your security. Combine external sharing with multi-factor authentication (MFA), data loss prevention (DLP), and audit logs.
- Stay current. Microsoft updates sharing policies regularly, so review your settings at least twice a year.
Together, these tools let you open your doors to collaboration while keeping security front and center. That’s what modern, connected work should feel like.
Common challenges and solutions
Even with a solid setup, a few common hiccups can arise. The good news is they are usually easy to fix once you know where to look.
Problem: The external user cannot access the site.
Solution: Confirm that external sharing is enabled and that they are signing in with the same email used for the invitation.
Problem: The user does not have a Microsoft account.
Solution: They will be prompted to create one or use a one-time passcode to access the site.
Problem: You cannot find where to manage external users.
Solution: Go to Site Settings > People and groups to view all users, including guests.
Problem: External sharing is disabled by your admin.
Solution: This usually means the tenant-level setting in the Microsoft 365 admin center restricts sharing. Ask your admin to enable New and existing guests for your site or organization.
When you know these troubleshooting steps, you can solve most access issues in minutes instead of hours.
Collaboration without compromise
Adding external users to SharePoint is not just about giving access. It is about building a more connected way of working that brings people together while keeping your information safe.
With the right setup and safeguards in place, you can collaborate confidently, whether your partners are across the hall or across the globe.
At Fresh, we believe collaboration should feel simple, secure and empowering, just like your intranet. Fresh works with a network of expert partners who can help you create a SharePoint experience that connects everyone, inside and outside your organization.
FAQs about adding external users to SharePoint
Can an unlicensed user access SharePoint?
Yes. External users do not need a Microsoft 365 license. They can access shared content with a Microsoft account or by using the one-time passcode sign-in.
How do I add an external user to SharePoint Online?
Go to your site, open Settings > Site Permissions > Share site, add their email, assign permissions, then select Add.
What permissions can I grant to external users on SharePoint?
You can assign Read (Visitor), Edit (Member), or Full Control (Owner). Choose the minimum level they need to do their work.
How can I share a specific document with an external user on SharePoint?
Open the document, select Share, enter their email, choose View or Edit, then select Send.
Are there any limitations to sharing content with external users on SharePoint?
Yes. Admin settings can restrict external sharing, and guests cannot access certain internal apps or data. Your site settings cannot exceed the tenant-wide policy.
What security measures should I take when adding external users on SharePoint?
Use MFA, set guest access expiration, limit sharing to trusted domains and review access regularly. Pair this with DLP and audit logs for better visibility.