Managing Entra ID Guest User Accounts

As an assistant administrator, you can invite external users or guest users to collaborate and share applications in Microsoft Entra ID. Guest users can sign into Microsoft Entra ID using their credentials to access applications that you have shared with them.

Execute a search operation to locate and select the required Azure guest user object. After you select one or more objects in the list, the taskbar becomes active with options such as delete, block sign-in, add to groups, resend an invitation, and modify properties.

Invite an Azure guest user

To invite a guest user to Microsoft Entra ID, navigate to Create > Invite Azure User in the Management masthead. When you invite a guest user to Microsoft Entra ID, DRA sends an email invitation to the guest user and creates a user account for the guest user in Microsoft Entra ID. An Azure guest user account is indicated in the Web Console by this icon .

The redirect URL and the invitation message are configured by the DRA Administrator in the Delegation and Configuration Console for each managed tenant. You can customize this message as necessary when you invite the user.

An Azure guest user must accept the invitation to start accessing the applications that you have shared. You can view the status of the invitation in the Guest Info tab. On accepting the invitation, the user is redirected to the URL that is specified in the Redirect URL field, where the Azure guest user can log in using their credentials.

Re-invite an Azure guest user

If the guest user has not accepted the invitation, you can resend the invitation.

To re-invite a guest user:

  1. Execute a search operation to locate and select the required Azure guest user object.

  2. Select Account > Resend Invite.

Modify Azure guest user account properties

You can manage the properties of Entra ID Guest User Accounts in Microsoft Entra ID. You can specify whether to hide the email address from appearing in the address list and add alternate email addresses.

Allow Sign-In for an Azure guest user account

You can enable an Azure guest user account for signing in to Microsoft Entra ID.

Block Sign-In for an Azure guest user account

You can block an Azure guest user account from signing in to Microsoft Entra ID.

Delete an Azure guest user account

You can delete an Azure guest user account from Microsoft Entra ID, but it cannot be restored from DRA.

Specify an Azure group membership for Entra ID Guest User Accounts

You can add or remove Entra ID Guest User Accounts from a specific Azure group in Microsoft Entra ID.

Assign licenses to Entra ID Guest User Accounts

When you add an Azure guest user account to a group that is associated with an Office 365 policy, DRA automatically assigns the relevant Office 365 license to the Azure guest user.

Add Entra ID Guest User Accounts to temporary group assignments

You can add or remove Entra ID Guest User Accounts from temporary group assignments from the Tasks tab in the masthead on both primary and secondary Administration servers.