Setting permissions for users who can configure anonymous access

Tenant administrators control the ability of each user in the tenant to configure anonymous access for apps. They do this in the Administration activity center.

To allow a user in the tenant to generate app links that can be accessed by people outside the tenant, the Anonymous access link permission must be configured to Allowed for the tenant user. This procedure is performed by a tenant administrator.

This permission can be assigned in either of the following ways:

• Assigning the permission in the User Default settings (affects all tenant users)

• Assigning the permission as a custom role (only affects tenant users with the custom role)

For more information about the user default and custom roles, see Roles and permissions for users and administrators.

For more information about all available permissions in the User Default and custom roles, see Permissions in User Default and custom roles.

User Default settings

Tenant administrators can adjust User Default permissions. By default, these permissions prevent all users, including tenant administrators, from configuring anonymous access for apps. You can change the setting to Allowed to let all users configure anonymous access.

Do the following:

1. In the Administration activity center, go to Manage users.

2. Select the Permissions tab.

3. Click User Default.

4. Expand Content types > Applications.

5. For Anonymous access link, select Allowed from the dropdown list.

6. Click Confirm.

Custom roles

Tenant administrators can create custom roles to grant specific users higher permissions than the User Default. You might want to restrict anonymous access in the User Default, then create a custom role to allow it for selected users.

Do the following:

1. Create a custom role

   1. In the Administration activity center, go to Manage users.

   2. Select the Permissions tab, then click Create new.

   3. Enter a Name and, optionally, a Description for the role.

   4. Under Permissions, expand Content types > Applications.

   5. For Anonymous access link, select Allowed from the dropdown list.

   6. Click Confirm.

2. Assign the custom role to users

   1. Go to the All users tab.

   2. Select the checkboxes for the users you want to assign the role to.

   3. Click Manage roles.

   4. Select your new custom role and click Save.