Hi,

Is there a way to control what level of access federated users have?

By the looks of it, I can create a conferencing policy to remove the A/V access but then that would apply to internal users too.

A company wants to federate with us but we dont want them to have A/V access at the moment.

Any ideas if this can be done ?

Hi 

By default, no policies are configured to support external user access, including remote user access, federated user access, even if you have already enabled external user access support for your organization. To control the use of external user access, you must configure one or more policies, specifying the type of external user access supported for each policy. This includes the following external access policies:

• Global policy   The global policy is created when you deploy your Edge Servers. By default, no external user access options are enabled in the global policy. To support external user access at the global level, you configure the global policy to support one or more types of external user access options. The global policy applies to all users in your organization, but site policies and user policies override the global policy. If you delete the global policy, you do not remove it. Instead, you reset it to the default setting.

• Site policy   You can create and configure one or more site policies to limit support for external user access to specific sites. The configuration in the site policy overrides the global policy, but only for the specific site covered by the site policy. For example, if you enable remote user access in the global policy, you might specify a site policy that disables remote user access for a specific site. By default, a site policy is applied to all users of that site, but you can assign a user policy to a user to override the site policy setting.

• User policy   You can create and configure one or more user policies to limit support for remote user access to specific users. The configuration in the user policy overrides the global and site policy, but only for the specific users to whom the user policy is assigned. For example, if you enable remote user access in the global policy and site policy, you might specify a user policy that disables remote user access and then assign that user policy to specific users. If you create a user policy, you must apply it to one or more users before it takes effect.

 Refer More --  https://technet.microsoft.com/en-us/library/gg520966.aspx

I appreciate your response but Ive read all of this on TechNet. What Im asking is, is it possible just to disable certain features for Federation? EG can I disable Audio and Video for federated users only and keep the A/V for internal users?

The policies don't get that granular.  You could block outside AV access altogether by firewalling the ports, or stopping the A/V edge service, but that stops a legitimate user from your firm from using A/V outside as well.  Some third party products may exist to give this level of control, but I'm not 100% sure of that.

Hi MessageUndeliverable,

The feature that you mentioned is not currently available, the current policies cant be configured to achieve this purpose.

But it is really a good idea, you can submit a feedback to Microsoft. With your feedback, our engineers can get more familiar with your need and further improve our product. Thank you for working closely to improve our products and service.

 

Best regards,

Eric

Thank you.

Where should I submit feedback?

Hi MessageUndeliverable,

 

You can visit the following website.

https://support2.microsoft.com/oas/default.aspx?gprid=924&st=1&wfxredirect=1&sd=gn

Also you can Contact Microsoft Customer Support Services to get help. For a complete list of Microsoft Customer Support Services telephone numbers, visit the following Microsoft website:

http://support.microsoft.com/contactus/?ws=support

 

Best regards,

Eric