Forum Discussion
Sync Error
- Mar 11, 2020
AndrewFrance Hi Andrew, I solved it this morning. It is definitely related to the setting that disables team/group creation by non-admins. See: https://docs.microsoft.com/en-au/microsoft-365/admin/create-groups/manage-creation-of-groups?view=o365-worldwide
In order to get around this, I setup an Azure Security group and set this group as being allowed to create teams/groups following the instructions in the linked article. I then added the following Service Principles/User as members of the group, to allow them to create teams: Microsoft.Azure.SyncFabric, Microsoft Teams Services, Microsoft Teams.
All is now working and Teams are getting created as expected.
Hope this helps.
AndrewFrance Hi Andrew, I solved it this morning. It is definitely related to the setting that disables team/group creation by non-admins. See: https://docs.microsoft.com/en-au/microsoft-365/admin/create-groups/manage-creation-of-groups?view=o365-worldwide
In order to get around this, I setup an Azure Security group and set this group as being allowed to create teams/groups following the instructions in the linked article. I then added the following Service Principles/User as members of the group, to allow them to create teams: Microsoft.Azure.SyncFabric, Microsoft Teams Services, Microsoft Teams.
All is now working and Teams are getting created as expected.
Hope this helps.
- AndrewFranceMar 11, 2020Copper Contributor
Hi,
I've tested it our side, and it does appear to resolve the issue. I added my Global Admin account into the security group for Office 365 group creation, and I got no errors.
Interestingly it does say in Microsoft's documentation that Office 365 Global admins can create Groups via any means, such as the Microsoft 365 admin centre, despite the group restrictions, which is probably why SDS could create the group despite the error. https://docs.microsoft.com/en-gb/microsoft-365/admin/create-groups/manage-creation-of-groups?view=o365-worldwide
Many thanks for updating the ticket with this solution.
Andrew
- AndrewFranceMar 11, 2020Copper Contributor
Wow well done. That's really interesting. In fact although we are getting the error, the Office 365 groups and Teams are being created successfully. I'm also signed-in as a Global Administrator.
However we did just update our policy so that only members of a certain Group could create Office 365 groups, of which I don't think I've added Global Administrators into, as I didn't think they would affected by this. Or at least don't seem to be.
I had a great Teams Meeting with SDS support yesterday, and he informed me that as this issue was not causing any problems then it was probably safe to ignore. The value TenantActionable is also False, which should indicate that there's nothing I can change to resolve the error.
I will look through that article, and most likely add my admin account to the Group which allowed to create Office 365 groups, and test again.