Approval driven cloud O365 group membership

%3CLINGO-SUB%20id%3D%22lingo-sub-188435%22%20slang%3D%22en-US%22%3EApproval%20driven%20cloud%20O365%20group%20membership%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-188435%22%20slang%3D%22en-US%22%3E%3CP%3EBy%20default%2C%20any%20cloud%20O365%20group%20created%20at%20AAD%20is%20%3CSTRONG%3EPublic%3C%2FSTRONG%3E%20and%20anyone%20in%20company%20can%20join%20it.%20I%20want%20to%20restrict%20that%20either%20one%20of%20the%20appraoch%3C%2FP%3E%0A%3COL%3E%0A%3CLI%3Emember%20sends%20a%20request%20which%20should%20be%20approved%20by%20the%20Owner%20of%20that%20group%3C%2FLI%3E%0A%3CLI%3Eonly%20owner%20can%20add%20other%20members.%3C%2FLI%3E%0A%3C%2FOL%3E%3C%2FLINGO-BODY%3E%3CLINGO-LABS%20id%3D%22lingo-labs-188435%22%20slang%3D%22en-US%22%3E%3CLINGO-LABEL%3EAzure%20AD%3C%2FLINGO-LABEL%3E%3CLINGO-LABEL%3EOffice%20365%3C%2FLINGO-LABEL%3E%3C%2FLINGO-LABS%3E%3CLINGO-SUB%20id%3D%22lingo-sub-189402%22%20slang%3D%22en-US%22%3ERe%3A%20Approval%20driven%20cloud%20O365%20group%20membership%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-189402%22%20slang%3D%22en-US%22%3E%3CP%3EI'm%20creating%20these%20groups%20from%20Azure%20Portal%20(portal.azure.com)%20-%26gt%3B%20AD%20-%26gt%3B%20Groups%20screen%20which%20does%20not%20provide%20an%20options%20to%20create%20a%20group%20with%20private%20setting.%20Will%20check%20the%20options%20mentioned%20by%20you.%3C%2FP%3E%0A%3CP%3E%26nbsp%3B%3C%2FP%3E%0A%3CP%3EI%20will%20also%20validate%20that%20the%20group%20created%20using%20suggested%20links%20is%20type%20of%20cloud%20O365%20group%20(not%20a%20master%20on-premise%20group%20sync%20to%20AAD)%20as%20the%20Microsoft%20Graph%20API%20can%20not%20add%20a%20member%20into%20on-premise%20sync%20group.%3C%2FP%3E%0A%3CP%3E%26nbsp%3B%3C%2FP%3E%0A%3CP%3EThanks%3C%2FP%3E%3C%2FLINGO-BODY%3E%3CLINGO-SUB%20id%3D%22lingo-sub-188587%22%20slang%3D%22en-US%22%3ERe%3A%20Approval%20driven%20cloud%20O365%20group%20membership%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-188587%22%20slang%3D%22en-US%22%3E%3CP%3EYes%2C%20it's%20possible.%20It's%20actually%20one%20of%20the%20options%20you%20need%20to%20specify%20when%20creating%20a%20Group.%20I'd%20strongly%20recommend%20you%20at%20least%20review%20the%20documentation%20first%3A%20%3CA%20href%3D%22https%3A%2F%2Fsupport.office.com%2Fen-us%2Farticle%2Fcreate-a-group-in-outlook-04d0c9cf-6864-423c-a380-4fa858f27102%22%20target%3D%22_blank%22%20rel%3D%22noopener%20noreferrer%20noopener%20noreferrer%22%3Ehttps%3A%2F%2Fsupport.office.com%2Fen-us%2Farticle%2Fcreate-a-group-in-outlook-04d0c9cf-6864-423c-a380-4fa858f27102%3C%2FA%3E%3C%2FP%3E%3C%2FLINGO-BODY%3E%3CLINGO-SUB%20id%3D%22lingo-sub-188572%22%20slang%3D%22en-US%22%3ERe%3A%20Approval%20driven%20cloud%20O365%20group%20membership%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-188572%22%20slang%3D%22en-US%22%3E%3CP%3EWould%20it%20possible%20to%20create%20a%20new%20cloud%20O365%20group%20as%20private%20without%20updating%20the%26nbsp%3B%3CSPAN%3EOrganizationConfig%20as%20I%20don't%20have%20access%20on%20it%3F%3C%2FSPAN%3E%3C%2FP%3E%3C%2FLINGO-BODY%3E%3CLINGO-SUB%20id%3D%22lingo-sub-188571%22%20slang%3D%22en-US%22%3ERe%3A%20Approval%20driven%20cloud%20O365%20group%20membership%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-188571%22%20slang%3D%22en-US%22%3E%3CP%3EYou%20cant.%20Public%20means%20public%2C%20anyone%20can%20join%20and%2For%20be%20invited.%3C%2FP%3E%0A%3CP%3E%26nbsp%3B%3C%2FP%3E%0A%3CP%3EThe%20default%20type%20is%20actually%20changing%20to%20%3CSTRONG%3EPrivate%3C%2FSTRONG%3E%20now.%20And%20you%20can%20also%20toggle%20it%20on%20the%20org%20level%3A%3C%2FP%3E%0A%3CP%3E%26nbsp%3B%3C%2FP%3E%0A%3CP%3ESet-OrganizationConfig%20-DefaultGroupAccessType%20Private%3C%2FP%3E%3C%2FLINGO-BODY%3E
Highlighted
Microsoft

By default, any cloud O365 group created at AAD is Public and anyone in company can join it. I want to restrict that either one of the appraoch

  1. member sends a request which should be approved by the Owner of that group
  2. only owner can add other members.
4 Replies
Highlighted

You cant. Public means public, anyone can join and/or be invited.

 

The default type is actually changing to Private now. And you can also toggle it on the org level:

 

Set-OrganizationConfig -DefaultGroupAccessType Private

Highlighted

Would it possible to create a new cloud O365 group as private without updating the OrganizationConfig as I don't have access on it?

Highlighted

Yes, it's possible. It's actually one of the options you need to specify when creating a Group. I'd strongly recommend you at least review the documentation first: https://support.office.com/en-us/article/create-a-group-in-outlook-04d0c9cf-6864-423c-a380-4fa858f27...

Highlighted

I'm creating these groups from Azure Portal (portal.azure.com) -> AD -> Groups screen which does not provide an options to create a group with private setting. Will check the options mentioned by you.

 

I will also validate that the group created using suggested links is type of cloud O365 group (not a master on-premise group sync to AAD) as the Microsoft Graph API can not add a member into on-premise sync group.

 

Thanks