--- title: "Identity management: understand the 5 profiles in Microsoft 365" description: Understanding and tracking the different identity profiles in Microsoft 365 is fundamental to define appropriate security policies. image: https://blog.idecsi.com/hubfs/Blog%20Images/BLOG-5_IDs-3.png --- [![Logo-Idecsi-Black-tagline](https://blog.idecsi.com/hs-fs/hubfs/LOGOS%20IDECSI/LOGOS%20OFFICIELS/Logo-Idecsi-Black-tagline.png?width=1010&height=319&name=Logo-Idecsi-Black-tagline.png)](https://www.idecsi.com/) - Solutions DETOX® pour M365 Audit, Remediation & ROI [Discover DETOX](https://info.idecsi.com/detox-m365?hsLang=en) ![Audit, Remediation & ROI](https://blog.idecsi.com/hubfs/ILLU-4.png) Solutions IDECSI gives security and IT teams full control over their data — across DSPM, Data Access Governance, Human Risk Management, and Data Volume Management. - [![download\_done](https://blog.idecsi.com/hubfs/download_done.svg) M365 Data Security Platform](https://www.idecsi.com/solution/mydatasecurity/) - [![download\_done](https://blog.idecsi.com/hubfs/download_done.svg) Data storage optimization](https://www.idecsi.com/solution/mydatamanagement/) - Challenges M365 Checklist 15 Warning Signs Your M365 Data Is at Risk [Get the checklist](https://info.idecsi.com/checklist-15-warningsigns?hsLang=en) ![Checklist risques M365](https://blog.idecsi.com/hubfs/Frame-2147255341.png) Your 2026 Challenges Address your most critical data security and governance challenges - across your M365 environment - [![download\_done](https://blog.idecsi.com/hubfs/download_done.svg) Gain visibility accross M365](https://www.idecsi.com/challenges/visibility-microsoft-365) - [![download\_done](https://blog.idecsi.com/hubfs/download_done.svg) Get Ready For Copilot M365](https://www.idecsi.com/challenges/m365-copilot/) - [![download\_done](https://blog.idecsi.com/hubfs/download_done.svg) Control external user access](https://www.idecsi.com/challenges/external-access-microsoft-365/) - [![download\_done](https://blog.idecsi.com/hubfs/download_done.svg) Prevent Sensitive Data Exposure](https://www.idecsi.com/challenges/sensitive-data-m365/) - [![download\_done](https://blog.idecsi.com/hubfs/download_done.svg) Gain visibility across Microsoft 365](https://www.idecsi.com/challenges/visibility-microsoft-365/) - [![download\_done](https://blog.idecsi.com/hubfs/download_done.svg) Ensure regulatory compliance](https://www.idecsi.com/challenges/compliance-m365/) - Resources Is Your Tenant Ready for Copilot? A Security & Governance Playbook [Download](https://info.idecsi.com/whitepapper_copilot?hsLang=en) ![Copilot guide](https://blog.idecsi.com/hubfs/Frame-2147255339.png) Our resources Check out our useful resources for improving data protection - [![download\_done](https://blog.idecsi.com/hubfs/download_done.svg) Blog](https://blog.idecsi.com) - [![download\_done](https://blog.idecsi.com/hubfs/download_done.svg) Help Center](https://help.idecsi.com/) - [![download\_done](https://blog.idecsi.com/hubfs/download_done.svg) Ressources & News](https://blog.idecsi.com/resources?hsLang=en) - [![download\_done](https://blog.idecsi.com/hubfs/download_done.svg) About us](https://www.idecsi.com/about-us/) - [Customers](https://blog.idecsi.com/resources-customer?hsLang=en) - - [English](https://blog.idecsi.com/identity-management-profiles-microsoft365) - [Français](https://blog.idecsi.com/fr/gestion-identites-profils-microsoft365) Search [Request a demo](https://info.idecsi.com/demo-idecsi?hsLang=en) Microsoft 365 14 December 2022 # Identity management: 5 profiles to understand in Microsoft 365 ![User Identity in Microsoft 365](https://4272098.fs1.hubspotusercontent-na1.net/hubfs/4272098/Blog%20Images/BLOG-5_IDs-3.png) - [Home](https://www.idecsi.com/) - [Blog](https://blog.idecsi.com) - Identity management: 5 profiles to understand in Microsoft 365 [Microsoft 365](https://blog.idecsi.com/data-security-microsoft365?hsLang=en) relies on Azure Active Directory (Azure AD) for user identity management. Azure AD is the identity foundation and can be used as a single identity repository. Identity profiles allow users to be assigned roles, privilege levels, depending on their internal/external status and the use they will make of the tools. Moreover, an external user can be invited in different ways (Azure AD, shares, groups). It is fundamental to understand and follow the different identity profiles that exist in Microsoft 365 to define appropriate policies and to ensure the security of the user, especially over time. Discover the 5 types of identity for Microsoft 365 users with their specificities: ## Users Users are generally internal employees of the organization or external employees on long-term contracts. They have access to all collaboration features as soon as they are granted an Office 365 license. The account is provided by the organization and it is the organization that controls the end-to-end lifecycle. ## Anonymous users Anonymous users are external to the organization. Therefore, they should have more limited use of collaboration tools and more limited access to data. With the "anonymous user" profile they will only have access to the tenant via SharePoint, OneDrive anonymous share links or within Teams meetings (if you allow them). As an external user, no Microsoft license is required. ## Federated users The federated users are also external to the organization but belong to a company authorized by the organization to use Microsoft Teams. They have access to limited functionalities around communication: chat, audio, video. The account is provided by the federated organization, no license is required, but the users must authenticate themselves. ## Azure AD B2B users Unlike other identity profiles, Azure AD BtoB includes external users or guests, using the collaboration functionality in Microsoft Teams. Since March 2022, there are two groups: Collaboration and Direct. ### Azure AD B2B Collaboration users (guests) These users are external to the organization but have an authorized domain in Azure AD. They have access to the collaboration features in the Teams/SharePoint guest space after a team owner has added them. For these users, an Azure AD P1/P2 license will need to be granted. The lifecycle is not to be managed but it will be necessary to ensure that their presence and permissions are legitimate. This can be from a personal account or an account provided by the organization. This category is intended to replace SharePoint guests. ### Azure AD B2B Direct users These are also external to the organization but from an authorized Azure tenant in Azure AD. The collaboration features are accessible to them but only in the shared channels. By default, these identities are closed, an administrator must open the permissions at the Azure AD tenant level for them to be accessible. No license is required and the account is provided by the federated tenant organization.     To summarize, Microsoft's Azure AD B2B identities provide for collaboration users who are the classic guests where you have to manage the lifecycle. Then you have direct guests - privileged partners where you don't have control over the lifecycle, but they can be added into your shared channels. And today, this notion of Azure AD BtoB direct is restricted to channels, although Microsoft plans to extend it to other services later. ## Towards a better management of external guests Once you are familiar with the 5 identity profiles in Microsoft 365, you need to think about the desired security policies, including the implementation of a guest user lifecycle. It is necessary to ensure that the guest user respects the security policies of the company. To do this, companies can implement conditional access policies. Finally, to delete a user, Microsoft does not propose anything by default, it will then be necessary to define and implement manual or automatic processes.   ### Want to learn more about Microsoft Teams shared channels?    [![Read the article](https://no-cache.hubspot.com/cta/default/4272098/b1f7fe24-31e4-4a93-bab7-b53825258244.png)](https://cta-redirect.hubspot.com/cta/redirect/4272098/b1f7fe24-31e4-4a93-bab7-b53825258244) Recent articles [Microsoft 365 SharePoint Storage Costs in 2026: What's Changing](https://blog.idecsi.com/microsoft-365-sharepoint-storage-costs-2026?hsLang=en) [Zero Trust Data Governance for Microsoft 365: CISO Guide](https://blog.idecsi.com/zero-trust-data-governance-microsoft-365?hsLang=en) [Cybersecurity Awareness Month: A CISO's M365 Action Plan](https://blog.idecsi.com/cybersecurity-awareness-month-ciso-action-plan-m365?hsLang=en) [Microsoft Foundry: Complete Guide and Data Security Implications (2026)](https://blog.idecsi.com/microsoft-foundry-guide-security?hsLang=en) Best practices to improve Microsoft Teams security [![Download the infographic ](https://no-cache.hubspot.com/cta/default/4272098/825ad7d1-e961-4a7a-a6b3-6e380b22285f.png)](https://cta-redirect.hubspot.com/cta/redirect/4272098/825ad7d1-e961-4a7a-a6b3-6e380b22285f) Share this article Subscribe to our newsletter and receive new contents every month Our articles These articles may interest you ![](https://4272098.fs1.hubspotusercontent-na1.net/hubfs/4272098/Co%C3%BBt%20du%20stockage%20Microsoft%20365%20en%202026.png) Microsoft 365 Microsoft 365 SharePoint Storage Costs in 2026: What's Changing [Lire l'article](https://blog.idecsi.com/microsoft-365-sharepoint-storage-costs-2026?hsLang=en) ![](https://4272098.fs1.hubspotusercontent-na1.net/hubfs/4272098/Microsoft%20Foundry%20_%20guide%20complet%20et%20enjeux%20pour%20la%20s%C3%A9curit%C3%A9%20%282026%29.png) Microsoft 365 Security Microsoft Foundry: Complete Guide and Data Security Implications (2026) [Lire l'article](https://blog.idecsi.com/microsoft-foundry-guide-security?hsLang=en) ![](https://4272098.fs1.hubspotusercontent-na1.net/hubfs/4272098/Illus-Blog-Supervision.png) Microsoft 365 Security Microsoft 365 Phishing: Why Oversharing Makes a Compromised Account Far More Dangerous [Lire l'article](https://blog.idecsi.com/fr/phishing-microsoft-365-risques-donnees-partagees-1?hsLang=en) ![](https://4272098.fs1.hubspotusercontent-na1.net/hubfs/4272098/image%20%2858%29.png) Microsoft 365 Security Securing AI Agents in Microsoft 365: Best Practices for 2026 [Lire l'article](https://blog.idecsi.com/securing-ai-agents-microsoft-365?hsLang=en) ### Data protection, let's discuss your project?   [![Contact us](https://no-cache.hubspot.com/cta/default/4272098/bea4f372-c84f-4ec4-980c-ca663747fbfe.png)](https://cta-redirect.hubspot.com/cta/redirect/4272098/bea4f372-c84f-4ec4-980c-ca663747fbfe) ![video background](https://idecsi2a-dev-idecsi.pf27.wpserveur.net/wp-content/uploads/2022/02/video-background-idecsi-responsive-1.png) [![Logo-Idecsi-White-Ss-ES](https://blog.idecsi.com/hubfs/LOGOS%20IDECSI/LOGOS%20OFFICIELS/Logo-Idecsi-White-Ss-ES.svg)](https://www.idecsi.com/) +33 1 84 79 38 30 - - - - [Why choose IDECSI?](https://www.idecsi.com/user-security/) - [About us](https://www.idecsi.com/about-us/) - [Join the team](https://www.welcometothejungle.com/fr/companies/idecsi) - Solutions - [Visibility](https://www.idecsi.com/challenge-data-visibility/) - [Detection](https://www.idecsi.com/challenge-threat-detection/) - [User engagement](https://www.idecsi.com/challenge-involve-user/) - [Access review](https://www.idecsi.com/challenge-rights-review/) - [Remediation](https://www.idecsi.com/challenge-remediation/) - [Sensitive data](https://www.idecsi.com/challenge-sensitive-data/) - [Products](https://www.idecsi.com/solution/) - [MyDataSecurity](https://www.idecsi.com/solution/mydatasecurity/) - [Advanced Monitoring](https://www.idecsi.com/solution/advanced-monitoring/) - [MyDataManagement](https://www.idecsi.com/solution/mydatamanagement/) - Resources - [Resources & News](https://blog.idecsi.com/resources?hsLang=en) - [Blog](https://blog.idecsi.com) - [Customer success](https://blog.idecsi.com/resources-customer?hsLang=en) - [Extranet](https://extranet.idecsi.com?hsLang=en) © IDECSI ```json { "@context" : "https://schema.org", "@type" : "BlogPosting", "author" : { "@type" : "Person", "name" : "Caroline Bourgoin", "url" : "https://blog.idecsi.com/author/caroline-b" }, "dateModified" : "2022-12-14T10:42:20.935Z", "datePublished" : "2022-12-14T10:42:20.000Z", "headline" : "Identity management: understand the 5 profiles in Microsoft 365", "image" : [ "https://blog.idecsi.com/hubfs/Blog%20Images/BLOG-5_IDs-3.png" ], "mainEntityOfPage" : { "@id" : "https://blog.idecsi.com/identity-management-profiles-microsoft365", "@type" : "WebPage" }, "publisher" : { "@type" : "Organization", "logo" : { "@type" : "ImageObject", "url" : "https://blog.idecsi.com/hubfs/Logo-Idecsi-Black-tagline.png" }, "name" : "IDECSI" } } ```