You signed in with another tab or window. Reload to refresh your session.You signed out in another tab or window. Reload to refresh your session.You switched accounts on another tab or window. Reload to refresh your session.Dismiss alert
applicable: Lync Server 2010, Lync Server 2013, Skype for Business Online, Skype for Business Server 2015, Skype for Business Server 2019
4
+
applicable: Microsoft Teams, Skype for Business Online, Lync Server 2010, Lync Server 2013, Skype for Business Server 2015, Skype for Business Server 2019
5
5
title: Get-CsExternalAccessPolicy
6
6
schema: 2.0.0
7
-
manager: bulenteg
8
7
author: tomkau
9
8
ms.author: tomkau
10
9
ms.reviewer: rogupta
@@ -14,9 +13,9 @@ ms.reviewer: rogupta
14
13
15
14
## SYNOPSIS
16
15
Returns information about the external access policies that have been configured for use in your organization.
17
-
External access policies determine whether or not your users can: 1) communicate with users who have Session Initiation Protocol (SIP) accounts with a federated organization; 2) communicate with users who have SIP accounts with a public instant messaging (IM) provider such as Windows Live; and, 3) access Skype for Business Server over the Internet, without having to log on to your internal network.
18
-
This cmdlet was introduced in Lync Server 2010.
16
+
External access policies determine whether or not your users can: 1) communicate with users who have Session Initiation Protocol (SIP) accounts with a federated organization; 2) organize Microsoft Teams meetings that can be joined by users of custom applications built using Azure Communication Services (ACS); 3) access Skype for Business Server over the Internet, without having to log on to your internal network; and, 4) communicate with users who have SIP accounts with a public instant messaging (IM) provider such as Skype.
19
17
18
+
This cmdlet was introduced in Lync Server 2010.
20
19
21
20
## SYNTAX
22
21
@@ -41,13 +40,21 @@ That might be sufficient to meet your communication needs.
41
40
If it doesn't meet your needs, you can use external access policies to extend the ability of your users to communicate and collaborate.
42
41
External access policies can grant (or revoke) the ability of your users to do any or all of the following:
43
42
44
-
1. Communicate with people who have SIP accounts with a federated organization.
43
+
1.
44
+
Communicate with people who have SIP accounts with a federated organization.
45
45
Note that enabling federation alone will not provide users with this capability.
46
46
Instead, you must enable federation and then assign users an external access policy that gives them the right to communicate with federated users.
47
-
2. Communicate with people who have SIP accounts with a public instant messaging service such as Windows Live.
48
-
3. Access Skype for Business Server over the Internet, without having to first log on to your internal network.
47
+
48
+
2.
49
+
(Microsoft Teams only) Organize Teams meetings that can be joined by users of custom applications built using Azure Communication Services (ACS). This policy setting only applies if ACS Teams federation has been enabled at the tenant level using the cmdlet Set-CsTeamsAcsFederationConfiguration.
50
+
51
+
3.
52
+
Access Skype for Business Server over the Internet, without having to first log on to your internal network.
49
53
This enables your users to use Skype for Business and log on to Skype for Business Server from an Internet café or other remote location.
50
54
55
+
4.
56
+
Communicate with people who have SIP accounts with a public instant messaging service such as Skype.
57
+
51
58
The Get-CsExternalAccessPolicy cmdlet provides a way for you to return information about all of the external access policies that have been configured for use in your organization.
52
59
53
60
@@ -293,4 +300,3 @@ This cmdlet supports the common parameters: -Debug, -ErrorAction, -ErrorVariable
applicable: Lync Server 2010, Lync Server 2013, Skype for Business Online, Skype for Business Server 2015, Skype for Business Server 2019
4
+
applicable: Microsoft Teams, Skype for Business Online, Lync Server 2010, Lync Server 2013, Skype for Business Online, Skype for Business Server 2015, Skype for Business Server 2019
5
5
title: New-CsExternalAccessPolicy
6
6
schema: 2.0.0
7
-
manager: bulenteg
8
7
author: tomkau
9
8
ms.author: tomkau
10
9
ms.reviewer: rogupta
@@ -15,15 +14,17 @@ ms.reviewer: rogupta
15
14
## SYNOPSIS
16
15
17
16
Enables you to create a new external access policy.
18
-
External access policies determine whether or not your users can: 1) communicate with users who have Session Initiation Protocol (SIP) accounts with a federated organization; 2) communicate with users who have SIP accounts with a public instant messaging (IM) provider such as MSN; and, 3) access Skype for Business Server over the Internet, without having to log on to your internal network.
17
+
18
+
External access policies determine whether or not your users can: 1) communicate with users who have Session Initiation Protocol (SIP) accounts with a federated organization; 2) organize Microsoft Teams meetings that can be joined by users of custom applications built using Azure Communication Services (ACS); 3) access Skype for Business Server over the Internet, without having to log on to your internal network; and, 4) communicate with users who have SIP accounts with a public instant messaging (IM) provider such as Skype.
19
+
19
20
This cmdlet was introduced in Lync Server 2010.
20
21
21
22
For information about external access in Microsoft Teams, see [Manage external access in Microsoft Teams](/microsoftteams/manage-external-access) and [Teams and Skype interoperability](/microsoftteams/teams-skype-interop) for specific details.
@@ -44,12 +45,15 @@ Note that enabling federation alone will not provide users with this capability.
44
45
Instead, you must enable federation and then assign users an external access policy that gives them the right to communicate with federated users.
45
46
46
47
2.
47
-
Communicate with people who have SIP accounts with a public instant messaging service such as MSN.
48
+
(Microsoft Teams only) Organize Teams meetings that can be joined by users of custom applications built using Azure Communication Services (ACS). This policy setting only applies if ACS Teams federation has been enabled at the tenant level using the cmdlet Set-CsTeamsAcsFederationConfiguration.
48
49
49
50
3.
50
51
Access Skype for Business Server over the Internet, without having to first log on to your internal network.
51
52
This enables your users to use Skype for Business and log on to Skype for Business Server from an Internet café or other remote location.
52
53
54
+
4.
55
+
Communicate with people who have SIP accounts with a public instant messaging service such as Skype.
56
+
53
57
When you install Skype for Business Server, a global external access policy is automatically created for you.
54
58
In addition to the global policy, you can also create custom external access policies at either the site or the per-user scope.
55
59
If you create an external access policy at the site scope, that policy will automatically be assigned to the site upon creation.
@@ -62,6 +66,7 @@ In addition, you can have only one external access policy per site: if the Redmo
62
66
63
67
The following parameters are not applicable to Skype for Business Online/Microsoft Teams: Description, EnableXmppAccess, Force, Identity, InMemory, PipelineVariable, and Tenant
64
68
69
+
65
70
## EXAMPLES
66
71
67
72
@@ -158,6 +163,25 @@ Accept pipeline input: False
158
163
Accept wildcard characters: False
159
164
```
160
165
166
+
### -EnableAcsFederationAccess
167
+
Indicates whether Teams meeting organized by the user can be joined by users of customer applications built using Azure Communication Services (ACS). This policy setting only applies if ACS Teams federation has been enabled at the tenant level using the cmdlet Set-CsTeamsAcsFederationConfiguration.
168
+
169
+
To enable for all users, use the Set-CsExternalAccessPolicy cmdlet to update the global policy, setting the value to True. It can be disabled for selected users by assigning them a policy with federation disabled.
170
+
171
+
To enable just for a selected set of users, use the Set-CsExternalAccessPolicy cmdlet to update the global policy, setting the value to False. Then assign selected users a policy with federation enabled.
172
+
173
+
```yaml
174
+
Type: Boolean
175
+
Parameter Sets: (All)
176
+
Aliases:
177
+
Applicable: Microsoft Teams
178
+
Required: False
179
+
Position: Named
180
+
Default value: True
181
+
Accept pipeline input: False
182
+
Accept wildcard characters: False
183
+
```
184
+
161
185
### -EnableOutsideAccess
162
186
Indicates whether the user is allowed to connect to Skype for Business Server over the Internet, without logging on to the organization's internal network.
163
187
The default value is False.
@@ -343,3 +367,4 @@ Creates new instances of the Microsoft.Rtc.Management.WritableConfig.Policy.Exte
applicable: Lync Server 2010, Lync Server 2013, Skype for Business Online, Skype for Business Server 2015, Skype for Business Server 2019
5
5
title: Set-CsExternalAccessPolicy
6
6
schema: 2.0.0
7
-
manager: bulenteg
8
7
author: tomkau
9
8
ms.author: tomkau
10
9
ms.reviewer: rogupta
@@ -14,23 +13,25 @@ ms.reviewer: rogupta
14
13
15
14
## SYNOPSIS
16
15
Enables you to modify the properties of an existing external access policy.
17
-
External access policies determine whether or not your users can: 1) communicate with users who have Session Initiation Protocol (SIP) accounts with a federated organization; 2) communicate with users who have SIP accounts with a public instant messaging (IM) provider such as MSN and 3) access Skype for Business Server over the Internet, without having to log on to your internal network.
16
+
External access policies determine whether or not your users can: 1) communicate with users who have Session Initiation Protocol (SIP) accounts with a federated organization; 2) organize Microsoft Teams meetings that can be joined by users of custom applications built using Azure Communication Services (ACS); 3) access Skype for Business Server over the Internet, without having to log on to your internal network; and, 4) communicate with users who have SIP accounts with a public instant messaging (IM) provider such as Skype.
@@ -50,7 +51,7 @@ Note that enabling federation alone will not provide users with this capability.
50
51
Instead, you must enable federation and then assign users an external access policy that gives them the right to communicate with federated users.
51
52
52
53
2.
53
-
Communicate with people who have SIP accounts with a public instant messaging service such as MSN.
54
+
(Microsoft Teams only) Organize Teams meetings that can be joined by users of custom applications built using Azure Communication Services (ACS). This policy setting only applies if ACS Teams federation has been enabled at the tenant level using the cmdlet Set-CsTeamsAcsFederationConfiguration.
54
55
55
56
3.
56
57
Access Skype for Business Server over the Internet, without having to first log on to your internal network.
@@ -60,6 +61,9 @@ After an external access policy has been created, you can use the `Set-CsExterna
60
61
For example, by default the global policy does not allow users to communicate with people who have accounts with a federated organization.
61
62
If you would like to grant this capability to all of your users you can call the `Set-CsExternalAccessPolicy` cmdlet and set the value of the global policy's EnableFederationAccess property to True.
62
63
64
+
4.
65
+
Communicate with people who have SIP accounts with a public instant messaging service such as Skype.
66
+
63
67
The following parameters are not applicable to Skype for Business Online/Microsoft Teams: Description, EnableXmppAccess, Force, Identity, Instance, PipelineVariable, and Tenant
64
68
65
69
## EXAMPLES
@@ -105,6 +109,22 @@ This collection is piped to the `Where-Object` cmdlet, which picks out only thos
105
109
The filtered collection is then piped to the `Set-CsExternalAccessPolicy` cmdlet, which takes each policy and sets the EnableFederationAccess property to True.
106
110
The net result: all external access policies that allow public cloud access will also allow federation access.
107
111
112
+
### -------------------------- Example 5 ------------------------
113
+
```
114
+
Set-CsExternalAccessPolicy -Identity Global -EnableAcsFederationAccess $false
In this example, the Global policy is updated to disallow Teams-ACS federation for all users, then a new external access policy instance is created with Teams-ACS federation enabled and which can be assigned to selected users for which Team-ACS federation will be allowed.
119
+
120
+
### -------------------------- Example 5 ------------------------
121
+
```
122
+
Set-CsExternalAccessPolicy -Identity Global -EnableAcsFederationAccess $true
In this example, the Global policy is updated to allow Teams-ACS federation for all users, then a new external access policy instance is created with Teams-ACS federation disabled and which can then be assigned to selected users for which Team-ACS federation will not be allowed.
127
+
108
128
109
129
## PARAMETERS
110
130
@@ -184,6 +204,25 @@ Accept pipeline input: False
184
204
Accept wildcard characters: False
185
205
```
186
206
207
+
### -EnableAcsFederationAccess
208
+
Indicates whether Teams meeting organized by the user can be joined by users of customer applications built using Azure Communication Services (ACS). This policy setting only applies if ACS Teams federation has been enabled at the tenant level using the cmdlet Set-CsTeamsAcsFederationConfiguration.
209
+
210
+
To enable for all users, use the Set-CsExternalAccessPolicy cmdlet to update the global policy, setting the value to True. It can be disabled for selected users by assigning them a policy with federation disabled.
211
+
212
+
To enable just for a selected set of users, use the Set-CsExternalAccessPolicy cmdlet to update the global policy, setting the value to False. Then assign selected users a policy with federation enabled.
213
+
214
+
```yaml
215
+
Type: Boolean
216
+
Parameter Sets: (All)
217
+
Aliases:
218
+
Applicable: Microsoft Teams
219
+
Required: False
220
+
Position: Named
221
+
Default value: True
222
+
Accept pipeline input: False
223
+
Accept wildcard characters: False
224
+
```
225
+
187
226
### -EnablePublicCloudAccess
188
227
Indicates whether the user is allowed to communicate with people who have SIP accounts with a public Internet connectivity provider such as MSN.
189
228
Read [Manage external access in Microsoft Teams](/microsoftteams/manage-external-access) to get more information about the effect of this parameter in Microsoft Teams.
@@ -359,4 +398,3 @@ Instead, the cmdlet configures instances of the Microsoft.Rtc.Management.Writabl
Deprecation Notice: Integration of Skype for Business with third-party audio conferencing providers has been retired. More details are here - https://docs.microsoft.com/skypeforbusiness/legal-and-regulatory/end-of-integration-with-3rd-party-providers. As a result, cmdlet no longer works.
30
+
29
31
An audio conferencing provider is a third-party company that provides organizations with conferencing services.
30
32
Among other things, audio conferencing providers offer a way for users located off site and not connected to the corporate network or the Internet, to participate in the audio portion of a conference or meeting.
31
33
Audio conferencing providers often include high-end services such as live translation, transcription and live per-conference operator assistance.
**Important:** Functionality described in this document is currently in limited preview and only authorized organizations have access. This preview version is provided without a service-level agreement, and is not recommended for production workloads. Certain features might not be supported or might have constrained capabilities. For more information, see [Supplemental Terms of Use for Microsoft Azure Previews](https://azure.microsoft.com/support/legal/preview-supplemental-terms/).
16
+
17
+
This cmdlet is used to retrieve the federation configuration between Teams and Azure Communication Services (ACS).
18
+
19
+
## SYNTAX
20
+
21
+
```powershell
22
+
Get-CsTeamsAcsFederationConfiguration
23
+
```
24
+
25
+
## DESCRIPTION
26
+
27
+
Federation between Teams and Azure Communication Services (ACS) allows users of custom solutions built with ACS to connect and communicate with Teams users over voice, video, chat, and more. For more information, see [Teams interoperability](/azure/communication-services/concepts/teams-interop).
28
+
29
+
This cmdlet is used retrieve the Teams and ACS federation configuration for a Teams tenant.
30
+
31
+
You must be a Teams service admin, a Teams communication admin, or Global Administrator for your organization to run the cmdlet.
32
+
33
+
## Examples
34
+
35
+
### Example 1
36
+
In this example, federation has been enabled for just one ACS resource.
0 commit comments