Sales Person Wants Me to Provide Independent Rep With an Email Account
-
Uhm - no.
At least that is my first thought
-
What is the specific use case of a third party having an email in your domain?
It they give a really solid legal reason
- nope -
-
@gjacobse That is my first thought. I can't see how this can be done
-
This is not an IT decision, as much as we might want it to be, it’s not.
That said we can offer advice to the company in this regard.
Now onto the OP’s question, I don’t know how you would prevent access short of applying specific deny on whatever you want them not to have access to.
-
The only thing I can think of doing, as a compromise, would be to create an external mail contact that auto-forwards all mail from our company address to this person's existing external address. The obvious issue is sending mail out wouldn't be from our domain.
-
One solution would be to just give them an Exchange Online P1 license: https://products.office.com/en-us/exchange/compare-microsoft-exchange-online-plans. This would limit them to just email. That is the technical side of things. I'm with everyone else here, the requestor needs to provide a business justification and upline approval for this.
-
@Kelly said in Sales Person Wants Me to Provide Independent Rep With an Email Account:
One solution would be to just give them an Exchange Online P1 license: https://products.office.com/en-us/exchange/compare-microsoft-exchange-online-plans. This would limit them to just email. That is the technical side of things. I'm with everyone else here, the requestor needs to provide a business justification and upline approval for this.
Don't remember seeing P1. That could be the solution if they really want this.
-
@wrx7m said in Sales Person Wants Me to Provide Independent Rep With an Email Account:
@Kelly said in Sales Person Wants Me to Provide Independent Rep With an Email Account:
One solution would be to just give them an Exchange Online P1 license: https://products.office.com/en-us/exchange/compare-microsoft-exchange-online-plans. This would limit them to just email. That is the technical side of things. I'm with everyone else here, the requestor needs to provide a business justification and upline approval for this.
Don't remember seeing P1. That could be the solution if they really want this.
It isn't heavily advertised. You kind of need to already know what it is to be able to find it.
-
@gjacobse said in Sales Person Wants Me to Provide Independent Rep With an Email Account:
Uhm - no.
At least that is my first thought
That's my every thought when the request comes from a sales dick. YMMV.
-
@Kelly said in Sales Person Wants Me to Provide Independent Rep With an Email Account:
@wrx7m said in Sales Person Wants Me to Provide Independent Rep With an Email Account:
@Kelly said in Sales Person Wants Me to Provide Independent Rep With an Email Account:
One solution would be to just give them an Exchange Online P1 license: https://products.office.com/en-us/exchange/compare-microsoft-exchange-online-plans. This would limit them to just email. That is the technical side of things. I'm with everyone else here, the requestor needs to provide a business justification and upline approval for this.
Don't remember seeing P1. That could be the solution if they really want this.
It isn't heavily advertised. You kind of need to already know what it is to be able to find it.
I assume you are referring to exchange online plan 1?
-
@gjacobse said in Sales Person Wants Me to Provide Independent Rep With an Email Account:
Uhm - no.
At least that is my first thought
Why not? When is providing someone, internal, external, part time, full time, US, foreign, a mailbox an issue? Nearly all companies do this every day.
-
@gjacobse said in Sales Person Wants Me to Provide Independent Rep With an Email Account:
What is the specific use case of a third party having an email in your domain?
It they give a really solid legal reason
- nope -
Where "third party" = "sales staff."
-
@wrx7m said in Sales Person Wants Me to Provide Independent Rep With an Email Account:
how easy is it to limit functionality/isolate them from the broader environment, if I just give them an E1 license?
From what do you want to limit them? What automatic, universal access are you granting currently based on simply having email within the domain?
-
@wrx7m said in Sales Person Wants Me to Provide Independent Rep With an Email Account:
@gjacobse That is my first thought. I can't see how this can be done
My first thought is... where is there any concern?
-
My second thought is, if having an email account creates a security concern, it is not creating the account that creates the problem, it simply exposes an existing security problem.
-
@JaredBusch said in Sales Person Wants Me to Provide Independent Rep With an Email Account:
@Kelly said in Sales Person Wants Me to Provide Independent Rep With an Email Account:
@wrx7m said in Sales Person Wants Me to Provide Independent Rep With an Email Account:
@Kelly said in Sales Person Wants Me to Provide Independent Rep With an Email Account:
One solution would be to just give them an Exchange Online P1 license: https://products.office.com/en-us/exchange/compare-microsoft-exchange-online-plans. This would limit them to just email. That is the technical side of things. I'm with everyone else here, the requestor needs to provide a business justification and upline approval for this.
Don't remember seeing P1. That could be the solution if they really want this.
It isn't heavily advertised. You kind of need to already know what it is to be able to find it.
I assume you are referring to exchange online plan 1?
Yes, that is what I mentioned in my original post.
-
@scottalanmiller said in Sales Person Wants Me to Provide Independent Rep With an Email Account:
@wrx7m said in Sales Person Wants Me to Provide Independent Rep With an Email Account:
how easy is it to limit functionality/isolate them from the broader environment, if I just give them an E1 license?
From what do you want to limit them? What automatic, universal access are you granting currently based on simply having email within the domain?
This was going to be my question as well.
-
If an outside person would need access to Azure resources, you'd create a guest user for them.
-
@scottalanmiller said in Sales Person Wants Me to Provide Independent Rep With an Email Account:
My second thought is, if having an email account creates a security concern, it is not creating the account that creates the problem, it simply exposes an existing security problem.
Not necessarily security, but accessing features like SFB, OD and Teams. But, as Kelly mentioned, they have Exchange Online P1, which doesn't have any of the other services (different than E1.)
-
@wrx7m said in Sales Person Wants Me to Provide Independent Rep With an Email Account:
@scottalanmiller said in Sales Person Wants Me to Provide Independent Rep With an Email Account:
My second thought is, if having an email account creates a security concern, it is not creating the account that creates the problem, it simply exposes an existing security problem.
Not necessarily security, but accessing features like SFB, OD and Teams. But, as Kelly mentioned, they have Exchange Online P1, which doesn't have any of the other services (different than E1.)
When you assign a license to a user, you can control exactly what they can and can't use. There are switches in a drop-down you can disable/enable for each service.
