This browser is no longer supported.
Upgrade to Microsoft Edge to take advantage of the latest features, security updates, and technical support.
![](data:image/svg+xml, %3Csvg xmlns='http://www.w3.org/2000/svg' height='64' class='font-weight-bold' style='font: 600 30.11764705882353px "SegoeUI", Arial' width='64'%3E%3Ccircle fill='hsl(54.400000000000006, 24%, 15%)' cx='32' cy='32' r='32' /%3E%3Ctext x='50%25' y='55%25' dominant-baseline='middle' text-anchor='middle' fill='%23FFF' %3ESM%3C/text%3E%3C/svg%3E)
When sharing a document protected with an RMS-enabled label and custom permissions, external recipients encounter the following error:
The user's account does not exist in the sender's domain.
Thanks, Soumya
An Azure service that is used to control and help secure email, documents, and sensitive data that are shared outside the company.
Files protected by custom permissions are only accessible to "known" users. In the case of external recipients, the user must be first added as a Guest user to the directory.
Hello Vasil, thank you for your answer and it really helps.
I have a follow up question- what is that prevents external users to access such documents, basically which setting in organization affects this?
It's not a setting per se, it's simply a scenario that has limited support. Unlike "regular" labels, those with custom permissions require the user to be "known" within the directory, which for external users means you must have a matching guest user created/invited to the tenant already.