What should you recommend to meet the Microsoft Teams requirements for guest access?

Guest access in Microsoft Teams is fundamentally governed by Azure Active Directory's (Azure AD) External collaboration settings. To restrict guest invitations to a single, specific domain such as fabrikam.com, the most direct and effective method is to configure these settings in the Azure AD admin center. By setting the policy to "Allow invitations only to the specified domains" and adding "fabrikam.com" to the list, you ensure that only users from this domain can be added as guests across the organization, thereby meeting the requirement precisely.

B. Modifying Office 365 groups settings is a general on/off switch for guest access in groups but lacks the specific domain-level control required.
C. External access settings in the Teams admin center manage federation for chat/calls with other organizations, which is different from guest access (team membership).
D. Turning off org-wide guest access would prevent all guest invitations, which contradicts the goal of allowing guests from a specific domain.

- Microsoft Entra ID Documentation. (2023). B2B collaboration overview. Microsoft Learn. Retrieved from https://learn.microsoft.com/en-us/entra/external-id/b2b-collaboration-overview. (See section "Manage external collaboration settings").

- Microsoft Teams Documentation. (2024). Collaborate with guests in a team. Microsoft Learn. Retrieved from https://learn.microsoft.com/en-us/microsoftteams/guest-access. (See section "Configure guest access in the Azure AD admin center").

- Microsoft Teams Documentation. (2024). Use guest access and external access to collaborate with people outside your organization. Microsoft Learn. Retrieved from https://learn.microsoft.com/en-us/microsoftteams/communicate-with-users-from-other-organizations. (See section "Compare external and guest access").