ISO 19650 FAQ

ISO 19650 helps administrators manage access to SharePoint and Microsoft Teams content. Use it to create controlled project spaces, external collaboration areas, and virtual data rooms in Microsoft 365.

Add ISO 19650 to SharePoint

Add ISO 19650 from Microsoft AppSource. You must be a SharePoint administrator to complete the setup.

If you are not a SharePoint administrator, send the administrator this setup guide: Setup for admins.

After you request the app

Your SharePoint administrator receives the app request in Microsoft 365. Many organizations review these requests manually, so the app might not appear immediately after you submit the request.

Contact your SharePoint administrator if the request is still pending. The administrator must approve and deploy the app before you can use it on a site.

IT security reviews

Send your IT security team the relevant setup, architecture, and data protection documentation.

Find ISO 19650 after setup

ISO 19650 appears in the SharePoint command bar after it is installed on a site. Look for Manage permissions in the document library.

If the button does not appear, select a folder first:

View available features

For a feature overview and plan comparison, see ISO 19650 features.

Set up columns with Manage columns

Yes. Manage columns is the setup function for creating or changing the columns used for file names and metadata.

For instructions, see Set up names and metadata as an administrator or project manager.

Manage SharePoint and Teams content

Use ISO 19650 to manage access to content stored in SharePoint, OneDrive, and Microsoft Teams. This includes files, folders, links, pages, and embedded content that are stored or referenced through SharePoint.

Because Teams files are stored in SharePoint, the same permission model applies to content used in Teams channels. ISO 19650 also supports external collaboration scenarios where users from other organizations need controlled access.

Filter permissions by user email

To filter permissions for a specific person, first select Load nested sharing entries. Then enter the person's email address in the search bar.

The filter currently matches only permissions assigned directly to the person. If the person has access through a group, they do not appear in the filtered results.

View files in all nested folders

To see files across all folders below your current location, select Load nested sharing entries. You must select this option each time you want to load the nested files and their sharing entries.

Apply ISO policy rules to guest uploads

Yes. The naming check and approval workflow also apply to files uploaded by guests. Guests follow the same validation and approval steps as internal users.

Let external guests use the apps with an Enterprise license

Yes. External users with Microsoft Entra B2B guest accounts can use the Viewer and ISO 19650 apps under the organization's Enterprise license. They do not need a separate Enterprise license or a member account in the tenant. They must have access to the relevant SharePoint content and app components.

For setup instructions, see Grant guest users access to individual SharePoint solutions.

Use ISO 19650 with IFC files

If your project uses IFC files in SharePoint or Teams, combine ISO 19650 with IFC Viewer for SharePoint or IFC Viewer for Microsoft Teams. The viewer shows the current IFC model from the document library, while ISO 19650 controls who can access the underlying file or folder.

Manage access to Teams tab content

ISO 19650 can manage access to content that is displayed in Microsoft Teams tabs when that content is stored or controlled through Microsoft 365 or SharePoint. For example, you can restrict access to a document, folder, list, URL, or embedded application for specific user groups.

For third-party applications embedded in Teams tabs, review the access-control scenario before deployment.

Hide Teams tabs

ISO 19650 does not currently hide or show the Teams tab itself for specific users. It controls access to the content behind the tab.

Manage Microsoft Planner tasks

ISO 19650 does not currently manage Microsoft Planner task permissions. Microsoft Planner does not expose the same granular access model for individual task items that SharePoint lists provide.

For task scenarios that require granular permissions, use Microsoft Lists or Microsoft Project. Microsoft Lists works well with ISO 19650 because tasks are stored as list items and can use SharePoint permissions.

Manage access to websites

Use ISO 19650 to manage access to websites or web applications that are embedded in Microsoft Teams or SharePoint when access is controlled through Microsoft 365, SharePoint, or a supported URL-based configuration.

Use a custom permission model

Are you an enterprise or public sector organization, or do you need a custom permission model? Book a call with a solution expert to discuss your requirements.