Home

Locked Down O365 Group Creation. Any Unintended Consequences? Other Integrated Apps?

%3CLINGO-SUB%20id%3D%22lingo-sub-56783%22%20slang%3D%22en-US%22%3ELocked%20Down%20O365%20Group%20Creation.%20Any%20Unintended%20Consequences%3F%20Other%20Integrated%20Apps%3F%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-56783%22%20slang%3D%22en-US%22%3E%3CP%3EAfter%20finally%20getting%20my%20hands%20on%20the%20old%201.x%20AzureAD%20PS%20Module%20I%20was%20able%20to%20successfully%20restrict%20creation%20of%20O365%20Groups%20to%20an%20on-prem%20AD%20Group%2C%20and%20it%20seems%20to%20be%20working.%20%26nbsp%3BThis%20was%20actually%20done%20to%20control%20Teams%20creation%20(I%20combined%20it%20with%20a%20PS%20to%20disable%20the%20Teams%20Service%20Plan%20in%20user%20licenses).%3C%2FP%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3CP%3EShortly%20after%20that%20minute%20of%20happiness%2C%20I%20had%20a%20couple%20of%20other%20thoughts%3A%20%26nbsp%3B%3C%2FP%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3COL%3E%3CLI%3ECould%20locking%20things%20down%20like%20I%20did%20end%20up%20breaking%20some%20of%20the%20other%20functionality%20of%20O365%20and%20its%20apps%3F%20%26nbsp%3BGroups%20seem%20like%20the%20'glue'%20or%20'plumbing'%20that%20runs%20throughout%26nbsp%3BO365%2C%20and%20MS%20seems%20to%20be%20really%20pushing%20them%20to%20be%20the%20eventual%20single%20point%20of%20control%20for%20many%20things.%20%26nbsp%3BWith%20that%2C%20I'm%20worried%20about%20unintended%20consequences%20of%20restricting%20their%20creation.%20%26nbsp%3BHas%20anyone%20run%20into%20anything%20like%20this%3F%20%26nbsp%3BEssentially%2C%20the%20question%20is%20one%20of%20identifying%20anything%20that%20is%20directly%20or%20indirectly%20dependent%20on%20O365%20groups.%3CBR%20%2F%3E%3CBR%20%2F%3E%3C%2FLI%3E%3CLI%3ESo%20I%20can%20possibly%20be%20looking%2C%20is%20there%20a%20URL%20or%20can%20someone%20tell%20me%20which%20other%20O365%20apps%20are%20tightly%20integrated%20with%20and%2For%20do%20some%20kind%20of%20auto-provisioning%20of%20Groups%3F%26nbsp%3B%3C%2FLI%3E%3C%2FOL%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3CP%3EI've%20seen%20the%20following%20cited%2C%20but%20haven't%20dug%20too%20deep%20into%20any%20of%20them%20and%20don't%20know%20for%20sure%3A%3C%2FP%3E%3CUL%3E%3CLI%3ETeams%3C%2FLI%3E%3CLI%3EOutlook%3C%2FLI%3E%3CLI%3EEXO%3C%2FLI%3E%3CLI%3EAzureAD%3C%2FLI%3E%3CLI%3EPower%20BI%3C%2FLI%3E%3CLI%3ESharePoint%3C%2FLI%3E%3CLI%3EYammer%3F%3C%2FLI%3E%3CLI%3ESkype%3F%3C%2FLI%3E%3C%2FUL%3E%3CP%3EThanks%20to%20this%26nbsp%3Bcommunity%20for%20helping%20me%20close%20the%20barn%20door%20before%20the%20horse(s)%20got%20out%20on%20Groups%2FTeams.%3C%2FP%3E%3C%2FLINGO-BODY%3E%3CLINGO-LABS%20id%3D%22lingo-labs-56783%22%20slang%3D%22en-US%22%3E%3CLINGO-LABEL%3EAdmin%3C%2FLINGO-LABEL%3E%3CLINGO-LABEL%3EOffice%20365%20Groups%3C%2FLINGO-LABEL%3E%3C%2FLINGO-LABS%3E%3CLINGO-SUB%20id%3D%22lingo-sub-56932%22%20slang%3D%22en-US%22%3ERe%3A%20Locked%20Down%20O365%20Group%20Creation.%20Any%20Unintended%20Consequences%3F%20Other%20Integrated%20Apps%3F%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-56932%22%20slang%3D%22en-US%22%3E%3CP%3EHere%20is%20what%20I%20think%20is%20a%20great%20breakdown%20of%20the%20current%20set%20of%20services%20and%20corresponding%20solutions%20within%20O365%20Groups%20via%20%3CA%20href%3D%22https%3A%2F%2Ftechcommunity.microsoft.com%2Ft5%2Fuser%2Fviewprofilepage%2Fuser-id%2F146%22%20target%3D%22_blank%22%3E%40Benjamin%20Niaulin%3C%2FA%3E.%26nbsp%3B%3C%2FP%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3CP%3E%3CSPAN%20class%3D%22lia-inline-image-display-wrapper%20lia-image-align-inline%22%20style%3D%22width%3A%20999px%3B%22%3E%3CIMG%20src%3D%22https%3A%2F%2Fgxcuf89792.i.lithium.com%2Ft5%2Fimage%2Fserverpage%2Fimage-id%2F12404i359D67E9BED125FB%2Fimage-size%2Flarge%3Fv%3D1.0%26amp%3Bpx%3D999%22%20alt%3D%22C2juVFaWQAQY0KG.jpg%22%20title%3D%22C2juVFaWQAQY0KG.jpg%22%20%2F%3E%3C%2FSPAN%3EI%20would%20say%20one%20of%20the%20larger%20changes%20when%20disabling%20Groups%20going%20forward%20is%20the%20Yammer%20integration%20with%20Groups.%20%3CA%20href%3D%22https%3A%2F%2Fsupport.office.com%2Fen-us%2Farticle%2FYammer-and-Office-365-Groups-d8c239dc-a48b-47ab-b85e-6b4b8191a869%3Fui%3Den-US%26amp%3Brs%3Den-US%26amp%3Bad%3DUS%26amp%3BfromAR%3D1%22%20target%3D%22_blank%22%20rel%3D%22noopener%20noreferrer%20noopener%20noreferrer%22%3EHere%3C%2FA%3E%26nbsp%3Bis%20some%20of%20the%20latest%20info%20on%20the%20Yammer%20and%20Group%20integration.%26nbsp%3B%3C%2FP%3E%3C%2FLINGO-BODY%3E%3CLINGO-SUB%20id%3D%22lingo-sub-56828%22%20slang%3D%22en-US%22%3ERe%3A%20Locked%20Down%20O365%20Group%20Creation.%20Any%20Unintended%20Consequences%3F%20Other%20Integrated%20Apps%3F%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-56828%22%20slang%3D%22en-US%22%3EMain%20issues%20you%20will%20have%2C%20as%20Vasil%20says%2C%20are%20related%20to%20any%20other%20Apps%20that%20need%20to%20automatically%20create%20Groups%20behind%20the%20scenes%20such%20as%20Outlook%20Customer%20Manager%20or%20StaffHub.%20For%20the%20other%20Apps%20you%20will%20have%20to%20relay%20on%20the%20people%20that%20can%20create%20Groups%20to%20create%20Plans%2C%20Teams%2C%20etc.%3C%2FLINGO-BODY%3E%3CLINGO-SUB%20id%3D%22lingo-sub-56827%22%20slang%3D%22en-US%22%3ERe%3A%20Locked%20Down%20O365%20Group%20Creation.%20Any%20Unintended%20Consequences%3F%20Other%20Integrated%20Apps%3F%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-56827%22%20slang%3D%22en-US%22%3E%3CP%3EIf%20you%20havent%20started%20using%20Groups%2FTeams%20yet%2C%20disabling%20them%20will%20not%20break%20anything.%20All%20the%20%22core%22%20workloads%20function%20just%20fine%20without%20Groups%2C%20albeit%20you%20will%20be%20missing%20on%20some%20of%20the%20new%20stuff.%20There%20are%20specific%20functionalities%20built%20on%20top%20of%20Groups%2C%20such%20as%20Planner%20or%20StaffHub%2C%20you%20will%20not%20be%20able%20to%20use%20those.%3C%2FP%3E%3C%2FLINGO-BODY%3E
Deleted
Not applicable

After finally getting my hands on the old 1.x AzureAD PS Module I was able to successfully restrict creation of O365 Groups to an on-prem AD Group, and it seems to be working.  This was actually done to control Teams creation (I combined it with a PS to disable the Teams Service Plan in user licenses).

 

Shortly after that minute of happiness, I had a couple of other thoughts:  

 

  1. Could locking things down like I did end up breaking some of the other functionality of O365 and its apps?  Groups seem like the 'glue' or 'plumbing' that runs throughout O365, and MS seems to be really pushing them to be the eventual single point of control for many things.  With that, I'm worried about unintended consequences of restricting their creation.  Has anyone run into anything like this?  Essentially, the question is one of identifying anything that is directly or indirectly dependent on O365 groups.

  2. So I can possibly be looking, is there a URL or can someone tell me which other O365 apps are tightly integrated with and/or do some kind of auto-provisioning of Groups? 

 

I've seen the following cited, but haven't dug too deep into any of them and don't know for sure:

  • Teams
  • Outlook
  • EXO
  • AzureAD
  • Power BI
  • SharePoint
  • Yammer?
  • Skype?

Thanks to this community for helping me close the barn door before the horse(s) got out on Groups/Teams.

3 Replies
Highlighted

If you havent started using Groups/Teams yet, disabling them will not break anything. All the "core" workloads function just fine without Groups, albeit you will be missing on some of the new stuff. There are specific functionalities built on top of Groups, such as Planner or StaffHub, you will not be able to use those.

Highlighted
Main issues you will have, as Vasil says, are related to any other Apps that need to automatically create Groups behind the scenes such as Outlook Customer Manager or StaffHub. For the other Apps you will have to relay on the people that can create Groups to create Plans, Teams, etc.
Highlighted

Here is what I think is a great breakdown of the current set of services and corresponding solutions within O365 Groups via @Benjamin Niaulin

 

C2juVFaWQAQY0KG.jpgI would say one of the larger changes when disabling Groups going forward is the Yammer integration with Groups. Here is some of the latest info on the Yammer and Group integration. 

Related Conversations