How can I revoke assignment of personal TeamsFilesPolicy to user?

Question

To remove the Files tab from the Teams channel i found the solution to set the Global TeamsFilesPolicy Settings to:&nbsp;Identity : GlobalNativeFileEntryPoints : DisabledSPChannelFilesTab : Disabled&nbsp;Because I did not want to directly change the global settings for the whole Organisation before exactly knowing that is going to happen I decided to first try this Settings with a custom Policy on my Own user account.&nbsp;For this I proceeded as described here:&nbsp;Turn off Teams Native File Upload policy - Microsoft Teams | Microsoft Learn&nbsp;I did run the commands using the Microsoft PowerShell in the following order:&nbsp;1. New-CsTeamsFilesPolicy -Identity UserPolicy -SPChannelFilesTab Disabled&nbsp;2. Grant-CsTeamsFilesPolicy -identity "email address removed for privacy reasons" -PolicyName UserPolicy&nbsp;Until to that point everything worked as expected.&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;But then i tried to remove the assignment of this new created TeamsFilesPolicy "UserPolicy" from the user "email address removed for privacy reasons".&nbsp;&nbsp;First I tried it with the command:&nbsp;Remove-CsTeamsFilesPolicy -Identity UserPolicy&nbsp;which gives me the following error:&nbsp;Remove-CsTeamsFilesPolicy : The policy "UserPolicy" is currently assigned to one or more users or groups. Ensurepolicy is not assigned before removing.In Zeile:1 Zeichen:1+ Remove-CsTeamsFilesPolicy -Identity UserPolicy+ ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~+ CategoryInfo : InvalidOperation: ({ ConfigType = ... = UserPolicy }:&lt;&gt;f__AnonymousType92`2) [Remove-CsTeamsFilesPolicy], Exception+ FullyQualifiedErrorId : ClientError,Microsoft.Teams.ConfigApi.Cmdlets.RemoveCsTeamsFilesPolicy&nbsp;&nbsp;I can assure you that this policy is only assigned to the one user "email address removed for privacy reasons".&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;Then I tried to use the following approach:&nbsp;Grant-CsTeamsFilesPolicy -Identity email address removed for privacy reasons -PolicyName "$null"&nbsp;This command works fine, but when i later check which polices are assigned to the user "email address removed for privacy reasons" with the command:&nbsp;Get-CsUserPolicyAssignment -Identity email address removed for privacy reasons&nbsp;I get the follwoing output:&nbsp;&nbsp;PolicyType&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; PolicyName&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; PolicySource----------&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; ----------&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; ------------xxxxx&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; xxxxx&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; xxxxxxxxxx&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; xxxxx&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; xxxxxxxxxx&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; xxxxx&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; xxxxxTeamsFilesPolicy&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; UserPolicy&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; {UserPolicy}xxxxx&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; xxxxx&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; xxxxxxxxxx xxxxx xxxxxxxxxx xxxxx xxxxxxxxxx xxxxx xxxxx&nbsp;&nbsp;Which tells me that Granting the "policy" $null did not work.&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;Can anyone tell me how i remove the user specific policy "UserPolicy" from any choosen user so that the global policy will be active again?&nbsp;Thanks for your help!&nbsp;

tedd_yeom · Answer

I confirmed that the given File policy disappears when the value of policyName is simply "" instead of $null.ex)Grant-CsTeamsFilesPolicy -Identity &lt;UPN&gt; -PolicyName ""

vasilmichev · Answer

Try using $null without the quotes.

elcamino_st · Answer

Hi Vasil, thanks a lot for your reply. Sadly this results in the same behavoiour like the command with the quotes. The command is acceptet but the UserPolicy stays assigned.

vasilmichev · Answer

You sure about that? Might be a replication delay, but if you're still seeing the old value best open a support case.
&nbsp;
[18:10:44][Login script]# Get-CsUserPolicyAssignment -User email address removed for privacy reasons

PolicyType         PolicyName                 PolicySource
----------         ----------                 ------------
LocationProfile    US                         {US}
MeetingPolicy      BposSAllModality           {BposSAllModality}
MobilityPolicy     MobilityEnableOutsideVoice {MobilityEnableOutsideVoice}
TeamsFilesPolicy   UserPolicy                 {UserPolicy}
TeamsMeetingPolicy RestrictedAnonymousAccess  {RestrictedAnonymousAccess}
TeamsUpgradePolicy UpgradeToTeams             {UpgradeToTeams}

[18:10:47][Login script]# Grant-CsTeamsFilesPolicy -Identity email address removed for privacy reasons -PolicyName $null

[18:11:05][Login script]# Get-CsUserPolicyAssignment -User email address removed for privacy reasons

PolicyType         PolicyName                 PolicySource
----------         ----------                 ------------
LocationProfile    US                         {US}
MeetingPolicy      BposSAllModality           {BposSAllModality}
MobilityPolicy     MobilityEnableOutsideVoice {MobilityEnableOutsideVoice}
TeamsMeetingPolicy RestrictedAnonymousAccess  {RestrictedAnonymousAccess}
TeamsUpgradePolicy UpgradeToTeams             {UpgradeToTeams}

&nbsp;&nbsp;

elcamino_st · Answer

Hi VasilMichev I just double checked this morning to make sure and after around 18 hours, the policy is still assigned. So i think we can rule out a replication delay.&nbsp;I will do as you suggested and conntact the support for further help.&nbsp;Nevertheless thanks a lot for your help which is much appreciated.&nbsp;Have a nice day!&nbsp;

Forum Discussion

How can I revoke assignment of personal TeamsFilesPolicy to user?

7 Replies

Resources