GUID in the LoginName of site user "Everyone except external users"

Frederik-8475 20 Reputation points
2024-10-01T13:38:07.6666667+00:00

Hi,

I have a question regarding the default site user "Everyone except external users" - the LoginName of this site user follows the format "c:0-.f|rolemanager|spo-grid-all-users/<GUID>". What I have noticed is that the GUID at the end of the LoginName is usually the same as the tenant id of the site's organisation. However, in a few cases I have seen a GUID that differed from the tenant id.

So my question is what does this GUID actually signify? If the GUID does not always correspond to the tenant id of the organisation, is there a chance that the site user grants access to people outside of the organisation? Or will a site user following the format "c:0-.f|rolemanager|spo-grid-all-users/<guid>" always be for providing access to all members of whatever tenant that owns the site that the site user is part of, regardless of the GUID at the end of the LoginName?

SharePoint
SharePoint
A group of Microsoft Products and technologies used for sharing and managing content, knowledge, and applications.
10,675 questions
0 comments No comments
{count} votes

Accepted answer
  1. Xyza Xue_MSFT 24,716 Reputation points Microsoft Vendor
    2024-10-02T02:22:32.1266667+00:00

    Hi @Frederik-8475 ,

    The GUID in the LoginName of the site user "Everyone except external users" typically signifies the tenant ID of the organization. However, there are instances where the GUID might differ from the tenant ID. This discrepancy can occur due to various reasons, such as changes in the tenant configuration or specific settings applied to the site.

    The site user "Everyone except external users" is designed to provide access to all members of the tenant that owns the site, regardless of the GUID at the end of the LoginName. This means that even if the GUID differs, the access is still restricted to the members of the tenant.

    Common types of login names in SharePoint online:

    • Everyone -> c:0(.s|true
    • Everyone except external users -> c:0-.f|rolemanager|spo-grid-all-users/<tenant_id>
    • Group memebers -> c:0o.c|federateddirectoryclaimprovider|<group_guid>
    • Group Owners -> c:0o.c|federateddirectoryclaimprovider|<group_guid>
    • "Company Administrator" in Sharepoint Admin console -> c:0t.c|tenant|<UNKNOWN-GUID>
    • An O365 user ->i:0#.f|membership|<USER-EMAIL>

    If the answer is helpful, please click "Accept as Answer" and kindly upvote it. If you have extra questions about this answer, please click "Comment".

    Note: Please follow the steps in our documentation to enable e-mail notifications if you want to receive the related email notification for this thread.

    1 person found this answer helpful.
    0 comments No comments

0 additional answers

Sort by: Most helpful

Your answer

Answers can be marked as Accepted Answers by the question author, which helps users to know the answer solved the author's problem.