Is it possible to link another organization into Azure so that the new domain email accounts don't get added as guests in Azure AD? - azure

I'm developing an application that requires us to use Microsoft Graph API to create Teams meetings for users. This is obviously only possible with tenant domain email accounts (not guests) as you cannot do it on behalf of the user. Is it possible that I can add a new domain/organization to it so any of the new domain email addresses can be used to create meetings (don't get added as guests)?

Yes, you can create a new domain but you can add user's from another tenant as guest only, It is by design.

Related

Unable to create MS Team free organization account

I'm aware that there are two types of Teams accounts:
MS Team free personal account. https://teams.live.com/
MS Team free organization account. https://teams.microsoft.com/
Unfortunately, when I try to create the organization account (type 2) using this link https://support.microsoft.com/en-us/office/sign-up-for-teams-free-classic-70aaf044-b872-4c32-ac47-362ab29ebbb1, it just redirects me back to the free personal account (type 1).
Specifically, I need to create the type of free Teams account where you can create an Org, and then inside the Org you can have multiple Teams.
Every time I try to create the account, I always get redirected back to teams.live.com. I've tried multiple links on the Microsoft website, even from the "Business" section. Additionally, I tried with a different email address to see if there was a problem with the account that I was trying to use.
What happened to the free organization accounts?
What email address are you using to create your teams business account? Is it your personal email? If so that might be the case.
You need to use an email address linked to a work or school account (organization account) to be able to create a Teams business account. You also need to be a global admin in that work/school tenant.
see : https://learn.microsoft.com/en-us/microsoftteams/create-an-org-wide-team
Other useful links :
https://support.microsoft.com/en-us/office/which-account-do-you-want-to-use-2b5bbd7a-7df6-4283-beff-8015e28eb7b9
https://techcommunity.microsoft.com/t5/itops-talk-blog/what-s-the-difference-between-a-personal-microsoft-account-and-a/ba-p/2241897

Office 365 tenant to tenant email migration, enable mail users on new tenant for migration

I'm working off of Microsoft tenant to tenant migration preview as found here to move all our user email to a different tenant: https://learn.microsoft.com/en-us/microsoft-365/enterprise/cross-tenant-mailbox-migration?view=o365-worldwide
And I'm up to the step where I need to enable mail-users on the new tenant but nothing I have done so far has worked. I've been trying to use New-MailUsers to create a new external email address linked to the new user accounts but get an error that the proxy address is already in place so I have tried using the Set-User <identity> -PermanentlyClearPreviousMailboxInfo but that just says that it completed but nothing was changed.
I do have the new users created on the new tenant, and a couple of them are already licensed for mailboxes but the above does not work for either licensed nor unlicensed users.
Do I need to delete the user accounts completely and then try using the New-MailUsers to setup the external email address link for the new account? Or is there some step I'm missing somewhere?
Trying to make new mail enabled user
Trying to remove mailbox settings
The PowerShell error says that there is already a mailbox with that SMTP.
When you assign licenses, new mailboxes get provisioned. You need to remove everything, set up mail users with an exchangeGUID first, and then assign licenses.
From the article you referenced:
Users in the target organization must be licensed with appropriate Exchange Online subscriptions applicable for the organization. You may apply a license in advance of a mailbox move but ONLY once the target MailUser is properly set up with ExchangeGUID and proxy addresses. Applying a license before the ExchangeGUID is applied will result in a new mailbox provisioned in target organization.

Can't add a new user to create a new organization

I'm writing an API integration for docusign and I wanted to create a second organization for testing, but I can't do it because when I reach the screen to add accounts to the organization, I can't see any accounts listed.
I visit https://admindemo.docusign.com/create-organization
I fill the Name and Description, and press Next
In the Link Accounts page, I see no accounts. How can I add some accounts to this screen?
I'm not sure I understand the relationship between accounts and users, because I have created some users from the Admin>Users screen, but those are not displayed in the account page.
If it isn't asking too much, could I have a short explanation of the difference between these users and what the Organization page asks for, "Accounts"? I remember when I created these "Users", I had to provide an email account, and for me that relationship between Service and Email is what I normally consider an Account.
How can I add some new Accounts to create a second Organization and test the API?
Or, since I want to create more organizations to test if DocuSign has an option to make an organization Primary, is there such an option? I tried browsing the Organization settings but I could not find this.
Can I make one organization the "Primary" organization for an account? How would this be reflected in the response of the API endpoint?
Thank you very much!
Here is a diagram explaining the relationship between organization, accounts, members and users. Hope this make sense.
An account can only belong to a single organization, therefore, you need another account to get another organization (but an organization can have more than one account).

How to create new Microsoft organization?

I'm completely new to ms world and trying to access API under my personal account
https://learn.microsoft.com/en-us/graph/api/group-list?view=graph-rest-beta&tabs=http
However this API says that it can only be accessed using Delegated (work or school account).
Can anyone explain how to setup new organization account (taking into account that we have no organization yet), which ms service to use and which plan to subscribe for, if needed. They have so many services and it looks so confusing to assemble all this together, so please help.
As I said in the comments, first you need to have a tenant. If you have not buy an Azure subscription yet, you can also use a free account.
Then you can create a new work account or invite guest users in the tenant.

Automatic creation of active Yammer account for O365 user

I'm seeking a method of automatically provisioning an ‘active’ Yammer user account for a new O365 user account (and existing ones, as a once off), without requiring the user to ‘click the Yammer tile’ or otherwise login to Yammer.
The default process (as articulated in this post) is:
The Office 365 admin creates a user in Office 365 (or Azure AD).
The user logs on to Office 365 using the identity provider that is configured for the tenant.
The user clicks the Yammer tile in the app launcher to go to Yammer.
A new Yammer user is created for the Office 365 user.
The user's profile properties from Azure Active Directory are automatically populated in the user's Yammer profile.
We're building an employee app, which currently displays company news. We wish to add social functionality, leveraging the Yammer platform, via the REST API. We have developed a solution to impersonate existing users and like/comment on behalf their behalf.
However, most employees are ‘unsophisticated’ blue-collar workers, and it is anticipated that they will not complete steps 2, 3 & 4 above to ‘create/activate’ their Yammer user account (the activation steps).
Methods considered or explored so far:
Using the REST API to create a new user – this creates a user in the ‘pending’ state, which remains pending until the activation steps are completed.
Using the Bulk Update Users to create new users from a CSV:
a) If a password is set, then a new ‘active’ user is successfully created (great!). However, that user account appears to be entirely disconnected from the corresponding O365 user account (meaning changes to user profile properties will not sync to/from Azure AD, passwords may be different, and users who are deleted/suspended in AAD will not sync to Yammer). These accounts are only linked if/when the activation steps are completed.
b) If a password is not set, then the new user is created in a ‘pending’ state, much the same as using the REST API.
Questions:
Is there any other way to create an 'active' user in Yammer, which is linked to the user’s O365 account?
Could a provider hosted app be used to impersonate a user and complete the activation steps on their behalf?
Not that it solves the problem, but does the REST API allow you to update a user’s state from 'pending' to 'active' (or create an 'active' user in the first place)?
Your steps about the default process are pretty acurate but I would add that once a user is created in AD users can simply go to Yammer.com (either on web or on iphone/android) and sign in through there. Iphone and Android use an Azure Authentication library that will find the users Office account.
Is there any other way to create an 'active' user in Yammer, which is linked to the user’s O365 account?
There isn't at this time.
Could a provider hosted app be used to impersonate a user and complete the activation steps on their behalf?
This isn't supported at this time.
Not that it solves the problem, but does the REST API allow you to update a user’s state from 'pending' to 'active' (or create an 'active' user in the first place)?
There is not an api for this.

Resources