Great tutorial. Just tested it out. This also works with an unlicensed global admin account (no M365 license or Entra P1). Of course one should not do it because it's licensing fraud.
Great video! Im after a way to restrict users to create new Team groups, but i still want them to be able to create groups in other apps like planner. There should be a script or setting i would be able to change. Do you perhaps know what changes i need to do? Thank you in advance.
Hi iSlooshie, Microsoft Documents says " When you limit who can create a group, it affects all services that rely on groups for access, including: Outlook SharePoint Yammer Microsoft Teams Microsoft Stream Planner Power BI (classic) Project for the web / Roadmap" They recommend users to complete a training course and then adding them to the group of allowed users or create a Microsoft 365 groups for restricted users, and then assign the user as the owner of the group. Personally I like the last option and that's what we are using in our company. Let me know if you have any questions.
PowerShell Command
$GroupName = ""
$AllowGroupCreation = $False
Connect-AzureAD
$settingsObjectID = (Get-AzureADDirectorySetting | Where-object -Property Displayname -Value "Group.Unified" -EQ).id
if(!$settingsObjectID)
{
$template = Get-AzureADDirectorySettingTemplate | Where-object {$_.displayname -eq "group.unified"}
$settingsCopy = $template.CreateDirectorySetting()
New-AzureADDirectorySetting -DirectorySetting $settingsCopy
$settingsObjectID = (Get-AzureADDirectorySetting | Where-object -Property Displayname -Value "Group.Unified" -EQ).id
}
$settingsCopy = Get-AzureADDirectorySetting -Id $settingsObjectID
$settingsCopy["EnableGroupCreation"] = $AllowGroupCreation
if($GroupName)
{
$settingsCopy["GroupCreationAllowedGroupId"] = (Get-AzureADGroup -SearchString $GroupName).objectid
} else {
$settingsCopy["GroupCreationAllowedGroupId"] = $GroupName
}
Set-AzureADDirectorySetting -Id $settingsObjectID -DirectorySetting $settingsCopy
(Get-AzureADDirectorySetting -Id $settingsObjectID).Values
Great tutorial. Just tested it out. This also works with an unlicensed global admin account (no M365 license or Entra P1). Of course one should not do it because it's licensing fraud.
PERFECT VIDEO! don´t have to say more - helped me after looking for hours
Great video!
Im after a way to restrict users to create new Team groups, but i still want them to be able to create groups in other apps like planner.
There should be a script or setting i would be able to change.
Do you perhaps know what changes i need to do?
Thank you in advance.
Hi iSlooshie,
Microsoft Documents says " When you limit who can create a group, it affects all services that rely on groups for access, including:
Outlook
SharePoint
Yammer
Microsoft Teams
Microsoft Stream
Planner
Power BI (classic)
Project for the web / Roadmap"
They recommend users to complete a training course and then adding them to the group of allowed users or create a Microsoft 365 groups for restricted users, and then assign the user as the owner of the group. Personally I like the last option and that's what we are using in our company.
Let me know if you have any questions.