Block External Access to a Site using PowerShell

This article from SProbot compares two different methods for blocking external access to SharePoint Online sites:  PowerShell vs Sensitivity Labels.

I find the first section on the PowerShell method to be the preferred method.  The caveat here is that to perform this method you must have Global Admin rights on the O365 tenant.  In my case, that’s not feasible.

So the second option is interesting.  I did not realize that one could apply a sensitivity label to an entire site before this.  I had never noticed.  But under the section “Define the scope for this label” in Microsoft Purview (formerly Compliance Center) after you have chosen to “+ Create a label” sure enough, there is an option to define the scope to “Groups & sites”.   So this is helpful indeed and you don’t have to be a Global Admin to do it.