Teams Meeting Joining GCC Meeting Error

dodoc 21

When a user receives a meeting invite from an organization in the Government Community Cloud (GCC) environment, they have trouble joining the meeting if they try to sign in. Is this normal or is something in our tenant causing it? I believe they can still join as a guest.

GCC-Error - Copy

1 answer

JiSheng-MSFT 230 Reputation points Microsoft Vendor

2024-05-08T06:05:37.5733333+00:00
Hi @dodoc

Meeting invitations from the Government Community Cloud (GCC) have higher security requirements.

Invited users need one of the following three permissions to join the meeting:

(1). Authenticated access using a cross-cloud meeting connection.

(2). Authenticated access using a guest account.

(3). Anonymous access.

In order to invite guests from an organization in a different Microsoft Azure cloud environment, you need do the following:

If the organization you want to collaborate with is in a different Microsoft Azure cloud environment (such as commercial and DoD), enable cross-tenant connections with that Microsoft Azure cloud environment.

Set up cross-tenant access settings in Microsoft Entra ID with the organization that you want to collaborate with.

If you need more detailed information, you can refer to this article for reference.

If the answer is helpful, please click "Accept Answer" and kindly upvote it. If you have extra questions about this answer, please click "Comment".

Note: Please follow the steps in our documentation to enable e-mail notifications if you want to receive the related email notification for this thread.
Please sign in to rate this answer.
dodoc 21 Reputation points

2024-05-09T17:03:58.4533333+00:00

Thanks for the info. I turned on Cross-cloud meetings for Azure Government and then I had a new error message: "Your tenant administrator has restricted which organizations can be accessed" The user's administrator has set an outbound access policy that does not allow access to the resource tenant".

How do I remove the restriction or change the outbound access policy without having to create a meeting connection for each GCC tenant?

For the next test, I added the external tenant using the 'Add a Cross-cloud meeting connection' option. I then got the final error which shows the issue is on their end instead of ours.

JiSheng-MSFT 230 Reputation points Microsoft Vendor

2024-05-10T04:12:44.5233333+00:00

Microsoft Entra organizations can use External ID cross-tenant access settings to manage how they collaborate with other Microsoft Entra organizations and other Microsoft Azure clouds through B2B collaboration and B2B direct connect.
Based on the troubleshooting details you provided, please try contacting the user administrator to update the cross-tenant access policy to allow access to the resource tenant as follow:

Sign in to the Microsoft Entra admin center as at least a Security Administrator.

Browse to Identity > External Identities > Cross-tenant access settings, then select Cross-tenant access settings.

Select the Default settings tab and review the summary page.

To change the settings, select the Edit inbound defaults link or the Edit outbound defaults link.

Modify inbound access settings and outbound access settings refer to this reference

If you have any further questions, please do not hesitate to contact me.

JiSheng-MSFT 230 Reputation points Microsoft Vendor

2024-05-13T01:07:06.8+00:00

Hi @dodoc

I am checking the status of this case. Please let us know if you would like further assistance. Meanwhile, if the reply is helpful to you, please try to mark it as an answer to help others who encounter the same issue and read this thread.

Thank you for your understanding and patience!

JiSheng-MSFT 230 Reputation points Microsoft Vendor

2024-05-14T01:10:15.7566667+00:00

Hi @dodoc

It has been a while, how is everything going? If you have any update about this issue, please feel free to post back.

dodoc 21 Reputation points

2024-05-14T16:57:31.89+00:00

It's still a bit unclear as to exactly which setting we would need to change to enable a user to sign in when joining a GCC meeting and if I would even want to do that or just have them to join as a guest.

Also, I would like to know what the default settings are for cross-tenant access settings. How do I know if the settings in our tenant are the defaults or not? These are the settings we are currently using. Are these the defaults?

JiSheng-MSFT 230 Reputation points Microsoft Vendor

2024-05-15T03:26:18.36+00:00

Hi @dodoc

The settings you are currently using are indeed the default settings.

Allowing users to join meetings as guest users is a simple and effective way.

Going back to the original question, if you want users to be able to log in to join the meeting, please make sure to complete the following steps:

Add a cross-cloud meeting connection (Meetings between tenants in Microsoft Azure Government can't create a cross-cloud meeting connection with tenants in Microsoft Azure China.)

In the Teams admin center, expand Meetings, and then select Meeting settings.

Under Cross-cloud meetings, select Add.

Type the Tenant ID of the organization you want to connect to or look it up by using the fully qualified domain name.

If you want to allow users in the other organization to attend meetings hosted by your organization, set Inbound connections to On.

If you want to allow users in your organization to attend meetings in the other organization, set Outbound connections to On.

In your Microsoft cloud settings, enable the Microsoft Azure cloud you want to collaborate with.

Sign in to Microsoft Entra ID using a Global administrator or Security administrator account.

Browse to Identity > External Identities > Cross-tenant access settings, then select Microsoft cloud settings.

Select the checkboxes next to the external Microsoft Azure clouds you want to enable.

Add the tenant to your organizational settings

Then select Organizational settings.

Select Add organization.

On the Add organization pane, type the tenant ID for the organization (cross-cloud lookup by domain name isn't currently available).

Select the organization in the search results, and then select Add.

The organization appears in the Organizational settings list. At this point, all access settings for this organization are inherited from your default settings.

Please check whether the problem is solved after completing each step. Thank you for your cooperation and understanding.
Sign in to comment

Share via

Teams Meeting Joining GCC Meeting Error

1 answer