Forum Discussion

Markus_Johansson's avatar
Markus_Johansson
Steel Contributor
Oct 07, 2019
Solved

Prevent users from change privacy from "private" to "public" in Microsoft Teams

 
 

Anyone found a way to prevent users to change from private to public. 
There is a teams parameter called visibility and I assume it's the AccessType of the underlaying O365 group. 
I would want to restrict the option in the UI for the owner to change this. 

Nothing in the "CsTeamsClientConfiguration" and i can't find any policy which restrict this either. 

 

 

 

 

 

  • Hi Guys,

    There are uservoices open related to this

    Restrict changing from public to private and vice versa (what you need)
    https://microsoftteams.uservoice.com/forums/555103-public/suggestions/37909912-allow-only-global-admins-to-edit-private-public-te

    Ability to disable public Teams (a possible alternative)
    https://microsoftteams.uservoice.com/forums/555103-public/suggestions/19762252-ability-to-disable-public-teams

    Would recommend you vote on them to push them up the agenda. As with all uservoices they may be some time to be picked up, if at all. So I would recommend attending the next Teams AMA on the community and raising the question there too.

    I absolutely get why you would want them - particularly from preventing the exposure of sensitive data and conversations. I have voted on both of them.

    Hope that answers your question

    Best, Chris
    • ShaneOss's avatar
      ShaneOss
      Brass Contributor

      ChrisHoardMVP 

      Alternatively, as there's no current configurable option to all enforce this. It could also be managed by a script. The script could be scheduled to run, or on demand as needed.

       

      If you are using Teams for Education, Teams that are created using the Teams for Education template are created as public O365 groups but of type hidden membership. If your not using Teams for Education the second condition could be removed: -and ($_.HiddenGroupMembershipEnabled -ne 'True')

       

      The script then goes through to identify the public O365 groups and change them to private instead of public.

       

      # Find your public O365 groups. Exclude O365 groups which are public but of type hidden membership (used for Teams for Education).
      Get-UnifiedGroup -ResultSize Unlimited | Where-Object {($_.AccessType -eq "Public") -and ($_.HiddenGroupMembershipEnabled -ne 'True')} | Set-UnifiedGroup –AccessType Private

       

       

Resources