How to setup Governors on to Teams without granting excessive access

Thanks Phoebe!

1/ What level of access should Governors have? 

• Need to be able to view/edit and upload documents
• Should be allowed to post in channels

2/ How do you want them to join meetings? 

• Create calendar events is desired, although most often they will be created for them by a clerk (Admin).
• Meetings are online, but primarily in person.
• Most governors won't have a school email and rather a personal one, so it would be helpful if the email linked up to to their personal / other work calendar.

3/ What email types will they use? 

• Will be using a variety. Main ones you've referenced, but also sometimes work domain emails

4/ What security restrictions are important?

• If easier, most shouldn't be able to access any other teams.
• There may be examples where someone from the school needs to access that specific team (e.g. HeadTeacher is in other teams, but will sometimes be a part of this team).
• Some form of security is desirable, however given most work out of hours, the aim would be to allow self-serve of issues as much as possible. With as little IT assistance needed.

5/ What document storage model do you prefer? Will all Governor documents live inside Teams (SharePoint), or are there external repositories they need to access? 

• Documents live inside of teams.

6/ What is your current Teams environment? 

• We don't currently have guests enabled, but are not opposed to doing that if that supports our use case.
• We don't really have any special groups. A leadership one that is restricted is the only one that comes to mind.

Appreciate the diligence here!

Hello @Mark Roon

Thank you for the detailed information. Based on your requirements, I have outlined below a clear, step‑by‑step plan for how we can set up Microsoft Teams to support your governors with the appropriate access, collaboration features, and security controls. I have also included important notes and limitations to ensure expectations are fully aligned. 

Step 1: Enable Guest Access 

Because governors will be using personal and varied work email domains, guest access must be enabled in your tenant. 

1. Open the Microsoft Teams Admin Center. 
2. Navigate to Users > Guest access. 
3. Turn on Allow guest access in Teams. This is the core feature that allows external users to join Teams and collaborate. 
4. Allow time for the changes to propagate. 

Important Notes  

• Governors using personal emails (e.g., Gmail) may be required to sign in with or create a Microsoft account linked to that email in order to access Teams and SharePoint. 
• Guest users inherently have reduced permissions compared to standard members, which is expected and by design. 

For reference: Turn guest access in Microsoft Teams on or off - Microsoft Teams | Microsoft Learn 

Step 2: Create the Governors Team 

Recommended channel structure: 

• General – communications and high‑level updates 
• Meetings & Documents – agendas, minutes, papers 
• Committees – optional, depending on your governance model 
• Confidential – private channel for Chair, Clerk, and Headteacher if needed 

This structure keeps everything organised and prevents accidental exposure to other Teams. 

Important Notes  

• Guests cannot browse or discover other Teams unless explicitly added, which protects the rest of your environment. 
• Some internal staff (e.g. Headteacher) can be added as members of this Team without affecting access to their other Teams. 

For reference: Overview of teams and channels in Microsoft Teams - Microsoft Teams | Microsoft Learn 

Step 3: Configure Governor Permissions 

Allow Governors to View/Edit/Upload Documents 

• In the Governors Team, go to the Files tab. 
• Click Open in SharePoint (top navigation). 
• In SharePoint, go to Settings > Site permissions. 
• Ensure that Visitors (read‑only) and Members (edit access) are correctly aligned. 
• Verify that Guest users appear under “Members”, giving them “Edit” permission. 

For reference: Sharing & permissions in the SharePoint modern experience - SharePoint in Microsoft 365 | Microsoft… 

 Allow Governors to Post Messages in Channels 

1. Open the Governors Team. 
2. Click the three dots (⋯) next to the Team name. 
3. Select Manage Team. 
4. Click the Settings tab. 
5. Expand Guest permissions. 
6. Make sure the following is enabled: 
   • Allow guests to create and update channel (optional) 
     • Allow guests to delete channel (optional) 

Important Notes  

• Guest capabilities are intentionally limited in Teams and SharePoint. This helps maintain security and structure but may mean that governors see fewer options than staff. 
• Any future changes to guest permissions must be done centrally by IT or a Team owner. 

For reference: Set guest permissions for channels in Microsoft Teams - Microsoft Support 

 Step 4: Configure External Access for Meeting Participation 

Because governors will be using a mix of personal and work domains, you will need to configure external access appropriately. 

1. Go to Teams Admin Center > Users > External access. 
2. Configure the setting to Allow all external domains (recommended for your use case).  This ensures personal and work email domains used by governors can join meetings without issues. 

Important Notes 

• If you instead choose to allow only specific domains, every governor’s email domain must be added manually. 
• External access settings affect meeting participation and cross‑tenant communication, so they must be consistent with your organisation’s overall security policy. 

For reference: IT Admins - Manage external meetings and chat with people and organizations using Microsoft identit… 

 Step 5: Add Governors as Guests 

Once the Team and settings are prepared: 

1. Go to Manage Team > Add Member. 
2. Enter their personal or work email addresses. 
3. Each governor will receive an invitation and can self‑register using their existing Microsoft account. 

Guests, by design, cannot see any other Teams unless they are added to them, which meets your requirement for isolation. 

Important Notes 

• Some governors may require basic guidance when accepting the guest invitation, especially if they have not used Microsoft Teams with their personal email before. 
• Self‑service account recovery is available, but a few users may still require occasional support. 

 Step 6: Meeting Scheduling and Calendar Use 

Your model where the clerk creates most meetings works well. 

• Meetings created in Outlook or Teams and sent to governors will appear in their personal/work calendars. 
• Governors can schedule meetings directly in the Team’s channel if you’d like to allow that. 
• External users can participate in Teams meetings provided external access is enabled. 

This offers flexibility while allowing most administrative control to remain with the clerk. 

Important Notes  

• Guest users do not have the full Teams calendar app available to internal licensed users.  They can join meetings and create channel meetings but do not see the standard Teams calendar interface. 
• Using Outlook invitations is the most reliable way to ensure meetings appear in governors’ calendars. 

 Step 7: Document Storage and Management 

All documents will be stored within the Governors Team: 

• Files are stored in the Team’s SharePoint library, which supports versioning and controlled access. 
• Guest access must be enabled at the SharePoint / Microsoft 365 Group level 

This ensures all documents are centralised, secure, and easy to maintain. 

Important Notes  

• If SharePoint guest access is misconfigured, governors may see channels but not be able to access files, so this step is essential. 
• Retention policies, version control, and approval workflows can be added later depending on your governance needs. 

 I hope the given information is clear and helps you with your situation. Let me know if you need further clarifications. 

Thanks Phoebe, that's so helpful!

With that setup, is there anything I should be mindful of in terms of:

• Limitations
• Areas I should be especially careful on