Views: 115
Guest User vs External User
1. Guest User (User Type = Guest)
A Guest User is a person who is added to your organization’s Azure AD (Entra ID) from another domain or identity provider.
Key Points:
- Exists inside your tenant as a user account (Type = Guest).
- Added via Teams, SharePoint, Azure AD B2B, or invite email.
- Used for partners, vendors, contractors, temporary collaborators.
- Has limited permissions compared to internal users.
Example: Someone from abc.com invited to collaborate in your xyz.com Teams/SharePoint environment.
2. External User
An External User is anyone accessing your organization’s resources from outside, regardless of how they authenticate.
Key Points:
- May include Guest Users, federated users, shared-link users, etc.
- Does not always exist as an Azure AD user object.
- Describes a relationship, not a user type.
- Includes users from Gmail, Microsoft accounts, or public file sharing.
Example: A Gmail user accessing a file shared with their email without being added as a guest.
Summary Table
| Feature | Guest User | External User |
|---|---|---|
| Exists in Azure AD | Yes | No (not always) |
| User Type | Guest | No fixed type |
| Access Level | Limited | Varies (depends on sharing) |
| Added Manually/Invited | Yes | Optional |
| Used for Collaboration | Yes | Yes |
Final Summary
All Guest Users are External Users, but not all External Users are Guest Users.
