Question

Contoso wants every external guest user to explicitly accept a corporate acceptable-use agreement before they can access any SharePoint Online or Teams content shared with them. The agreement is a PDF that must be re-accepted every 12 months, and acceptance must be auditable. As the Microsoft 365 administrator, what should you configure to enforce this?

Accepted Answer

Upload the PDF as a terms of use in Microsoft Entra, then create a Conditional Access policy targeting all guest and external users that requires acceptance of that terms of use as a grant control.

Answer

Add the PDF link to the organizational privacy statement URL in the Microsoft 365 admin center organization profile settings.

Answer

Enable a self-service password reset (SSPR) registration campaign that prompts guests to review the agreement during sign-in.

Answer

Create a sensitivity label with the agreement text and apply it to all SharePoint sites shared externally.