You have an Azure AD tenant. You need to ensure that only users from specific external domains can be invited as guests to the tenant. Which settings should you configure?

Question

Options

• AExternal collaboration settings
• BAll identity providers
• CCross-tenant access settings
• DLinked subscriptions

• A
  70% (33)
• B
  4% (2)
• C
  6% (3)
• D
  19% (9)

Explanation

External Collaboration Settings in Azure AD (Entra ID) allow administrators to configure guest invitation policies, including the ability to create an allowlist or blocklist of specific external domains - making it the correct tool for restricting which external domains can be invited as guests.

Why the distractors are wrong:

• B. All identity providers manages authentication methods (like Google or Facebook federation) for external users, not domain-based restrictions on who can be invited.
• C. Cross-tenant access settings controls B2B collaboration and direct connect policies between specific Azure AD tenants, not broad domain-based invitation restrictions.
• D. Linked subscriptions relates to associating Azure subscriptions with a tenant and has no bearing on guest invitation policies.

Memory Tip: Think of "External Collaboration Settings" as the guestlist policy at a door - it determines who gets an invite based on their domain, before they even arrive. If you want to whitelist or blacklist specific email domains for guests, this is your go-to setting under Azure AD > External Identities > External Collaboration Settings.

No community discussion yet for this question.