You have a Microsoft 365 subscription that uses Microsoft Teams. You have a team named R&D_Projects. You need to prevent guest users from being invited to R&D_Projects. The guest users must be able…

Sensitivity labels, configured in Microsoft Purview, can be published and applied to Microsoft 365 Groups (which back Teams). A label can be set to control guest access, allowing an administrator to block guest invitations specifically for the R&D_Projects team by applying a label configured for this purpose, while other teams without this label can still allow guests.

The Set-AzureADGroup cmdlet in Azure PowerShell allows granular control over Microsoft 365 Group properties. By targeting the specific Microsoft 365 Group that backs the R&D_Projects team, an administrator can modify the AllowToAddGuests setting to $false for that group alone, thereby preventing guest invitations to only that team while maintaining guest access for other teams.

A Microsoft 365 group expiration policy manages the lifecycle of a group, determining when it expires and is deleted, but it has no bearing on guest access permissions.

Disabling guest access from the Microsoft Teams admin center typically applies at the organization-wide level or via a broad policy, which would prevent guest invitations to all teams, not just R&D_Projects.

Similar to the Teams admin center, disabling guest access in the Microsoft 365 admin center generally affects the entire tenant, preventing guest invitations across all teams and not meeting the selective blocking requirement.