You signed in with another tab or window. Reload to refresh your session.You signed out in another tab or window. Reload to refresh your session.You switched accounts on another tab or window. Reload to refresh your session.Dismiss alert
Added documentational to link to ability to turn off 365 group creation completely via a GUI Entra ID setting.
Not sure why this article never mentioned this ability and it can be done simply via GUI.
Copy file name to clipboardExpand all lines: microsoft-365/solutions/manage-creation-of-groups.md
+11-4Lines changed: 11 additions & 4 deletions
Display the source diff
Display the rich diff
Original file line number
Diff line number
Diff line change
@@ -31,7 +31,7 @@ description: Learn how to control which users can create Microsoft 365 Groups.
31
31
32
32
By default, all users can create Microsoft 365 groups. This is the recommended approach because it allows users to start collaborating without requiring assistance from IT.
33
33
34
-
If your business requires that you restrict who can create groups, you can restrict Microsoft 365 Groups creation to the members of a particular Microsoft 365 group or security group.
34
+
If your business requires that you restrict who can create groups, you can turn off Microsoft 365 Groups creation for users or restrict to the members of a particular Microsoft 365 group or security group.
35
35
36
36
If you're concerned about users creating teams or groups that don't comply with your business standards, consider requiring users to complete a training course and then adding them to the group of allowed users.
37
37
@@ -72,7 +72,14 @@ The following people don't need Microsoft Entra ID P1 or P2 or Microsoft Entra B
72
72
73
73
- People who are members of Microsoft 365 groups and who don't have the ability to create other groups.
74
74
75
-
## Step 1: Create a group for users who need to create Microsoft 365 groups
75
+
## Turn off Group creation
76
+
See [Group settings in the Microsoft Entra admin center](https://learn.microsoft.com/en-us/entra/identity/users/groups-self-service-management#group-settings) for controlling user's ability for Microsofot 365 Group creation.
77
+
78
+
## Restrict to sepcific groups
79
+
80
+
The following steps are for restricing group creation for specific users via group.
81
+
82
+
### Step 1: Create a group for users who need to create Microsoft 365 groups
76
83
77
84
Only one group in your organization can be used to control who is able to create Microsoft 365 Groups. But, you can nest other groups as members of this group.
78
85
@@ -85,7 +92,7 @@ Admins in the roles listed previously don't need to be members of this group; th
85
92
86
93
For detailed instructions, see [Create, edit, or delete a security group in the Microsoft 365 admin center](../admin/email/create-edit-or-delete-a-security-group.md).
87
94
88
-
## Step 2: Run PowerShell commands
95
+
###Step 2: Run PowerShell commands
89
96
90
97
Use the [Microsoft Graph PowerShell](/powershell/microsoftgraph/installation)**Beta** module to change the group-level guest access setting:
91
98
@@ -166,7 +173,7 @@ If in the future you want to change which group is used, you can rerun the scrip
166
173
167
174
If you want to turn off the group creation restriction and again allow all users to create groups, set `$GroupName` to `""` and `$AllowGroupCreation` to `"$true"` and rerun the script.
168
175
169
-
## Step 3: Verify that it works
176
+
###Step 3: Verify that it works
170
177
171
178
Changes can take 30 minutes or more to take effect. You can verify the new settings by completing the following steps:
0 commit comments