Jul 10 2018 07:12 AM
Jul 10 2018 07:12 AM
Is there any way to limit the creation of Office 365 Groups? I have found this article here by Microsoft, but requires Azure AD Premium. https://support.office.com/en-us/article/manage-who-can-create-office-365-groups-4c46c8cb-17d0-44b5-...
Is it possible without Azure AD Premium and just Basic Azure AD? Seems silly that this function would be limited to Azure AD Premium users as O365 Group creation gets out of hand very quickly.
Jul 10 2018 08:17 AMSolution
Jul 10 2018 12:53 PM
Hey guys--- I think there are actually 2 different ways to limit group creation. One option is a binary "on/off" switch where the you disable all ability for all your users to create O365 Groups/Teams through the native O365 end user interfaces (admins can still create groups through the O365 admin interfaces and PowerShell. This SHOULD NOT require AAD Premium, except for the admin running the PowerShell- I've seen this setting as well in the new AAD admin portal but never used this method myself. If it works, it may bypass the AAD P1 requirement for the admin). The second option is like the first except that you define a specific AAD Security Group that has the ability to create Groups/Teams through the native O365 Interfaces, but all other users are blocked from doing so. This option does require AAD Premium. The full licensing implications are hard to track down officially, but they are listed here: https://support.office.com/en-us/article/Learn-about-Office-365-Groups-b565caa1-5c40-40ef-9915-60fdb...
The PowerShell is essentially the same for both option 1 and 2 above, but option 2 has the additional step of creating the Security Group and adding it to the AAD Directory Settings Template. The process is described here: https://support.office.com/en-us/article/manage-who-can-create-office-365-groups-4c46c8cb-17d0-44b5-...
Jul 11 2018 07:45 AM
According to the Microsoft documentation, the administrator has to be licensed for Azure AD Premium in order to run the Set-AzureADDirectorySetting commandlet in Azure AD PowerShell. I agree that this is not enforced right now, but that doesn't change what they're saying.
Sep 07 2018 04:08 AM
Referring to the documentation from Microsoft: https://support.office.com/en-us/article/manage-who-can-create-office-365-groups-4c46c8cb-17d0-44b5-... - We find the licensing model a bit unclear :).
As @Max Fritz mention "someone need" Azure AD P1 Premium license. BUT what does it really mean, quote Microsoft
Doing the steps in this article requires a subscription to Azure Active Directory (Azure AD) Premium. The administrator who configures the settings, and the members of the affected groups, must have Azure AD Premium licenses assigned to them.
Just trying to understand the licencing requirements from Microsoft :)
Mar 14 2019 09:06 AM