Commands › Microsoft Teams
Set-CsTeamsExternalAccessConfiguration
Quick start script
# Set-CsTeamsExternalAccessConfiguration — quick start (serv365.ai)
# 1. Connect (app-only shown; interactive: omit the certificate parameters)
Connect-MicrosoftTeams -CertificateThumbprint $thumb -ApplicationId $appId -TenantId $tenantId
# 2. Capture the current state first — you cannot roll back what you never recorded
$before = Get-CsTeamsExternalAccessConfiguration
$before | Format-List
# 3. Make the change (dry run first)
Set-CsTeamsExternalAccessConfiguration -WhatIf
Set-CsTeamsExternalAccessConfiguration
# 4. Verify and diff
$after = Get-CsTeamsExternalAccessConfiguration
Compare-Object ($before | Out-String) ($after | Out-String)Syntax
Set-CsTeamsExternalAccessConfiguration [-BlockedUsers <List>] [-BlockExternalUserAccess <Boolean>] [[-Identity] <XdsIdentity>] [-Force] [-WhatIf] [<CommonParameters>]Parameters (5)
| Parameter | Type | Required | What it controls |
|---|---|---|---|
| -BlockedUsers | List | You can specify blocked users using a List object that contains either the user email or the MRI from the external user you want to block. The user in the list will not able to communicate with the internal users in... | |
| -BlockExternalAccessUserAccess | Boolean | Designates whether BlockedUsers list is taking effect or not. $true means BlockedUsers are blocked and can't communicate with internal users. | |
| -Force | SwitchParameter | Bypass confirmation | |
| -Identity | XdsIdentity | The only option is Global | |
| -WhatIf | SwitchParameter | Shows what would happen if the cmdlet runs. The cmdlet is not run. |
Reference facts derived from Microsoft documentation, © Microsoft, licensed CC BY 4.0; restructured with original guidance by serv365.ai.