I am starting to doubt myself, as I thought this was working:
external user on sandbox
External user not shown in search.
There don't seem to be any documented options to control this behavor. Can someone confirm.
adding this to Quirks, bugs and improvement requests for the JS and REST APIs
I'll escalate this internally. I would echo your suspicions but hoping there is a hidden flag somewhere.
Retrieving data ...