Fix Cannot Create a Team for a Guest User

When you try to create a team for a guest user in Microsoft Teams, you may see an error that says you do not have permission or that the guest account is not eligible. This problem typically occurs because guest accounts are restricted by default in Microsoft 365 and Teams policies. In this article, you will learn why guest users cannot be added as team owners or members during team creation, and you will get step-by-step instructions to fix the underlying permissions and policy settings.

Why Teams Cannot Create a Team for a Guest User

When you create a team in Teams, you must specify the team owner and optionally add members. If the person you want to add is a guest user, Teams checks several layers of permission before allowing the action. The most common reasons for failure are:

First, guest access might be disabled at the organization level. By default, guest access is turned off in Microsoft 365. If an administrator has not enabled it, Teams will not allow you to add any guest to a team, regardless of your role.

Second, the guest user may not have an active invitation. Guest users are added to your tenant via Azure Active Directory B2B collaboration. If the invitation was never sent or has expired, the guest account does not exist in your directory, and Teams cannot find them.

Third, your organization’s external collaboration settings may restrict which guests can be invited. Azure AD has a setting called Guest invite restrictions that can limit invitations to specific domains or only to admins. If your role does not meet the restriction, you will see an error.

Finally, Teams policies may prevent guests from being added as owners or members. Even if guest access is enabled, a specific guest policy might block the creation of teams or the addition of members by guests. Since you are trying to create a team for a guest user, the guest policy applies to the guest, not to you.

Steps to Diagnose and Fix Guest Team Creation Issues

Follow these steps in order. Each step addresses one of the common causes described above.

Step 1: Verify Guest Access Is Enabled at the Organization Level

1. Open the Teams admin center
   Go to https://admin.teams.microsoft.com and sign in with an account that has the Teams admin or global admin role.
2. Navigate to Org-wide settings
   In the left navigation, select Org-wide settings and then Guest access.
3. Turn on guest access
   Set the toggle Allow guest access in Microsoft Teams to On. Then scroll down and review the list of features available to guests. At minimum, ensure Create and update channels and Add or remove people are set to On. Click Save.

If guest access was off, this change will immediately allow you to add guests to new teams. Changes may take up to 24 hours to fully propagate, but usually they take effect within a few minutes.

Step 2: Confirm the Guest User Exists in Azure AD

1. Open the Azure AD admin center
   Go to https://aad.portal.azure.com and sign in with a global admin account.
2. Go to Users
   Select Users and then All users.
3. Search for the guest user
   Type the guest’s email address in the search box. If the user appears with a user type of Guest, the account exists. If not, you need to invite the guest first.
4. Invite the guest if missing
   Click New user and then Invite external user. Enter the guest’s email address and a personal message. Click Invite. The guest will receive an email with a link to accept the invitation.

If the guest has not accepted the invitation, they will not appear in the Teams people picker. Ask the guest to check their inbox and click the acceptance link.

Step 3: Adjust Azure AD External Collaboration Settings

1. Open External Identities
   In the Azure AD admin center, select External Identities and then External collaboration settings.
2. Set guest invite restrictions
   Under Guest invite restrictions, choose Anyone in the organization can invite guest users including guests and non-admins if you want to allow all users to invite guests. If you choose a more restrictive option, only members of the specified roles can invite guests. Ensure your account is in one of those roles.
3. Save your changes
   Click Save at the top of the page.

This setting directly controls who can add guests to teams. If you are not a global admin, you may need to ask an admin to change this setting or assign you the Guest Inviter role.

Step 4: Check and Modify Teams Guest Policies

1. Open the Teams admin center
   Go to https://admin.teams.microsoft.com and sign in with an admin account.
2. Navigate to User policies
   Select User policies and then Guest policies.
3. Review the default guest policy
   Click Global (Org-wide default). Ensure that Create or update channels and Add or remove members are set to On. Also check Allow guests to create teams if you want guests to be able to create their own teams.
4. Save the policy
   Click Save. Then go to Users and find the guest user. Check their assigned policy under Guest policies. If they have a custom policy, edit that policy to allow the required actions.

Even if you are the team creator, the guest policy applies to the guest user. If the guest policy blocks adding members, you will not be able to add the guest to the team.

Step 5: Create the Team with the Guest as a Member

1. Open Teams
   Launch the Teams desktop app or go to https://teams.microsoft.com.
2. Start a new team
   Click Teams on the left, then click Join or create a team. Click Create team.
3. Choose the team type
   Select From scratch and then choose Private or Public.
4. Add the guest
   In the Add members step, type the guest’s email address. If the guest appears in the list, select them. If not, go back to Step 2 and ensure the guest has accepted the invitation.
5. Set the guest as owner
   If you want the guest to own the team, click the dropdown next to their name and change Member to Owner. Note that some organizations disable this option. If you cannot change the role, the guest policy or the external collaboration settings may be blocking it.
6. Complete creation
   Click Create. The team will be created, and the guest will receive an invitation to join.

If Teams Still Cannot Create the Team for a Guest

Teams Shows “You don’t have permission to add guests”

This error appears when your account lacks the Guest Inviter role or when the Azure AD guest invite restrictions are set to Only admins and users in the guest inviter role can invite guests. Ask a global admin to assign you the Guest Inviter role in Azure AD. Alternatively, have an admin create the team and add the guest for you.

Teams Cannot Find the Guest in the People Picker

If the guest does not appear when you type their email, the guest invitation has not been accepted or the guest is not in your tenant. Re-send the invitation from Azure AD and ask the guest to click the acceptance link. The guest must also have a valid email address that is not blocked by your organization’s domain restrictions.

Guest Cannot Be Set as Owner

By default, guests cannot be team owners. This is a security measure. To allow guests to be owners, a Teams admin must change the guest policy. In the Teams admin center, go to User policies > Guest policies and edit the appropriate policy. Find the setting Allow guests to be team owners and set it to On. Note that this setting is not available in all tenants. If it is missing, your tenant may not support guest owners.

Guest Access Settings vs Guest Policies: Key Differences

Item	Org-wide Guest Access	Guest Policies
Location in admin center	Org-wide settings > Guest access	User policies > Guest policies
Controls	Whether guests can be added at all	What guests can do inside a team
Default setting	Off	Global policy with limited permissions
Impact on team creation	Blocks adding guests if off	Blocks guest from creating or managing teams if restricted

Understanding the difference helps you troubleshoot faster. If you cannot add a guest, check the org-wide setting first. If the guest cannot perform actions after being added, check the guest policy.

After you apply the fixes in this article, you can create a team that includes a guest user. Verify that the guest can access the team and its channels. Remember to test the guest experience by signing in as the guest or asking the guest to confirm. For advanced control, create a custom guest policy that allows specific permissions for different groups of guests.