Ability to disable external sharing by default for newly created Office 365 Groups
Currently if external sharing is enabled at the tenant level, new Office 365 Groups also have external sharing enabled by default. If an organization only wants to allow external sharing for a limited number of Office 365 Groups, but still allow any user to create a new Office 365 Group, IT is required to manually disable external sharing on every new group that is created which is not feasible.
This would be great. We have recently started using Teams Guest access - it's awesome, but we're tightly controlling where Guest can be used (perhaps we'll loosen up in the future). But for now, we have to schedule a posh job to disable Guest access on all new Groups created since we cannot change the default behavior.
It would be great to have a tenant setting to control the default Guest setting - enabled or disabled. It's just a small toggle, we're not asking for much. :-)
You can somewhat get around this by using a SharePoint site design that sets "setSiteExternalSharingCapability" to "disabled". It worked in our case. But if you have multiple designs it wouldn't scale well.
To add to this, if external sharing is enabled and a new Classic Team site collection is created, it does NOT inherit the external sharing settings, i.e. when a new classic team site is created, external sharing is disabled. But when you create a O365 group, for e.g. with Teams, then that sharepoint site collection has external sharing enabled - Even though the external sharing for O365 groups is disabled.
We have SharePoint and OneDrive locked down to prevent external access. O365 Groups circumvents that, and toggling off the external sharing at a group level is not efficient.