Skip to main content

Two Ways to Let Office 365 Tenants Share Calendars: Sharing Policies vs. Org Relationships

Nick Ross2 min read
Office 365 inter-tenant collaboration: Exchange

TL;DR

  • Exchange Online offers two distinct mechanisms for cross-tenant collaboration: sharing policies (user-to-user) and organization relationships (business-to-business).
  • By default there is no organization relationship configured, but users can already share free/busy info externally and send calendar access to anonymous users by email invitation.
  • Basic calendar defaults live in the admin portal under Settings > Services & Add-Ins > Calendar; granular sharing policies live in the Exchange Admin Center.
  • A sharing policy controls how much calendar detail leaves the tenant: free/busy time only, free/busy with subject and location, or all details including the title.
  • An organization relationship is scoped to specific external domains and to specific groups of users who are allowed to share with that organization.

When a client needs to collaborate with an outside organization, or when you as the MSP need shared visibility into a client's calendars, Exchange Online gives you two separate controls to do it. They are easy to confuse, and the defaults are more permissive than most owners realize. This is the overview of how inter-tenant collaboration works in Exchange Online: what the two mechanisms are, what is already turned on, and where to configure each one. It is the first in a series covering the different ways Office 365 supports cross-tenant collaboration.

What are we actually trying to enable?

The goals of inter-tenant collaboration usually come down to:

  • A central location for files and conversations
  • Sharing of calendars
  • Using instant messaging
  • Audio and video calls for communication
  • Securing access to resources and applications

This article focuses on the Exchange Online piece: calendar and free/busy sharing.

The two collaboration mechanisms in Exchange Online

Exchange Online defines collaboration through two different policy types, and choosing the right one is the whole game.

Business-to-business: organization relationships

Business-to-business sharing is set up by creating organization relationships. This is the right mechanism when two organizations want a defined, scoped relationship between their tenants.

User-to-user: sharing policies

User-to-user sharing is set up by creating sharing policies. This governs what individual users are allowed to share externally.

Exchange Online collaboration policy types

What is already turned on by default

Before you change anything, know the starting state. By default:

  • There is no organization relationship set up.
  • Users can share free/busy info with external users.
  • Users are allowed to send access to their calendars to anonymous users with an email invitation.
Default sharing settings
Default sharing settings detail

Adjusting the basic calendar defaults

In the admin portal

The first option is to open the admin portal and go to Settings > Services & Add-Ins.

Services and Add-Ins in the admin portal

Open Calendar settings

Select "Calendar" to view the default settings.

Calendar settings
Calendar default settings

Creating a granular sharing policy

Go to the Exchange Admin Center

For more granular policies, go to Admin Centers > Exchange Admin Center.

Exchange Admin Center

Open the Organization tab

Click Organization on the left-hand side to view or add new sharing policies.

Organization tab with sharing policies

Define how much detail leaves the tenant

You can choose to:

  • Share free/busy with time only
  • Share free/busy with time, subject, and location
  • Share all info including time, subject, location, and title
Defining the sharing policy detail level

Creating an organization relationship

In the Exchange Admin Center

Creating an organization relationship happens in the same place as creating an individual sharing policy.

Creating an organization relationship

Define the policy

Choose your settings and the external domains you want to create a relationship with.

Defining the organization relationship and external domains

Scope it to specific users

Choose the groups of users that are allowed to share with this organization.

Choosing which groups of users can share

Between sharing policies for user-level detail and organization relationships for scoped business-to-business sharing, you have the granularity to enable exactly the collaboration a client needs and nothing more. The catch worth remembering is that the permissive defaults are on from day one, so external calendar exposure is something you opt out of, not into.

Frequently asked questions

What is the difference between a sharing policy and an organization relationship in Exchange Online?

A sharing policy is user-to-user: it governs how much calendar detail individual users can share externally. An organization relationship is business-to-business: it establishes a defined relationship with specific external domains and limits which groups of users can share with that organization.

What can external users see by default?

As of June 2018, with no organization relationship configured, users can share free/busy information with external users and send calendar access to anonymous users via email invitation. Those defaults are on out of the box.

How much calendar detail can a sharing policy expose?

Three levels: free/busy time only; free/busy with time, subject, and location; or all information including time, subject, location, and title. Pick the least-revealing level that still lets the collaboration work.

See which tenants are oversharing calendars right now

Default external calendar sharing is on out of the box, and most owners never check it. CloudCapsule surfaces oversharing and external-access settings across every tenant you manage, against 250+ controls, in 60 seconds.

Run a free scan
Nick Ross

Written by

Nick Ross

CEO · Microsoft MVP · Founder, T-Minus 365

Nick is not just a CEO, he's a respected thought leader and influencer in the MSP space. Tens of thousands of MSPs learn through his YouTube channel, T-Minus365. Nick has been honored as a three-time Microsoft MVP for his educational content; his expertise and influence are the backbone of our mission, ensuring that you are in the best hands when it comes to security.

Nick joined Pax8 in 2017, where he would ultimately oversee product management for PSA and Microsoft integrations. Following his tenure at Pax8, Nick has continued to demonstrate his leadership prowess as an executive at various MSPs, culminating in his most recent role at Sourcepass.

Nick holds a Bachelor's Degree in Business Management from Florida State University, as well as a Minor Degree in Entrepreneurship. In his free time, Nick is an avid hiker, reader, and fitness-junkie.

Keep reading