5.2 Managing Azure Guest User Accounts

As an assistant administrator, you can invite external users or guest users to collaborate and share applications in Azure Active Directory. Guest users can sign into Azure Active Directory using their credentials to access applications that you have shared with them.

Execute a search operation to locate and select the required Azure guest user object. After you select one or more objects in the list, the taskbar becomes active with options such as delete, block sign-in, add to groups, resend an invitation, and modify properties.

Invite an Azure guest user

To invite a guest user to Azure Active Directory, navigate to Create > Invite Azure User in the Management masthead. When you invite a guest user to Azure Active Directory, DRA sends an email invitation to the guest user and creates a user account for the guest user in Azure Active Directory. An Azure guest user account is indicated in the Web Console by this icon .

NOTE:The redirect URL and the invitation message are configured by the DRA Administrator in the Delegation and Configuration Console for each managed tenant. You can customize this message as necessary when you invite the user.

An Azure guest user must accept the invitation to start accessing the applications that you have shared. You can view the status of the invitation in the Guest Info tab. On accepting the invitation, the user is redirected to the URL that is specified in the Redirect URL field, where the Azure guest user can log in using their credentials.

Re-invite an Azure guest user

If the guest user has not accepted the invitation, you can resend the invitation.

To re-invite a guest user:

  1. Execute a search operation to locate and select the required Azure guest user object.

  2. Select Account > Resend Invite.

Modify Azure guest user account properties

You can manage the properties of Azure guest user accounts in Azure Active Directory. You can specify whether to hide the email address from appearing in the address list and add alternate email addresses.

Allow Sign-In for an Azure guest user account

You can enable an Azure guest user account for signing in to Azure Active Directory.

Block Sign-In for an Azure guest user account

You can block an Azure guest user account from signing in to Azure Active Directory.

Delete an Azure guest user account

You can delete an Azure guest user account from Azure Active Directory, but it cannot be restored from DRA.

Specify an Azure group membership for Azure guest user accounts

You can add or remove Azure guest user accounts from a specific Azure group in Azure Active Directory.

Assign licenses to Azure guest user accounts

When you add an Azure guest user account to a group that is associated with an Office 365 policy, DRA automatically assigns the relevant Office 365 license to the Azure guest user.

Add Azure guest user accounts to temporary group assignments

You can add or remove Azure guest user accounts from temporary group assignments from the Tasks tab in the masthead on both primary and secondary Administration servers.