Planner restrictions if user can't create O365 Groups and plans

%3CLINGO-SUB%20id%3D%22lingo-sub-33889%22%20slang%3D%22en-US%22%3EPlanner%20restrictions%20if%20user%20can't%20create%20O365%20Groups%20and%20plans%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-33889%22%20slang%3D%22en-US%22%3E%3CP%3EWe%20would%20like%20to%20allow%20only%20certain%20users%20to%20create%20Office%20365%20Groups%20and%20understand%20that%20the%20same%20set%20of%20users%20will%20only%20be%20able%20to%20create%20plans%20in%20Planner.%20Will%20the%20users%20who%20can't%20create%20plans%20and%20O365%20Groups%20be%20able%20to%20use%20Planner%20%3F%20Are%20there%20any%20restrictions%20of%20things%20they%20can't%20do%20in%20Planner%20due%20to%20their%20lack%20of%20access%20to%20create%20plans%20and%20O365%20Groups%3F%3C%2FP%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3CP%3EThanks.%3C%2FP%3E%3C%2FLINGO-BODY%3E%3CLINGO-SUB%20id%3D%22lingo-sub-42410%22%20slang%3D%22en-US%22%3ERE%3A%20Planner%20restrictions%20if%20user%20can't%20create%20O365%20Groups%20and%20plans%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-42410%22%20slang%3D%22en-US%22%3EWe%20did%20the%20same%20here.%20Only%20Admins%20can%20create%20Plans%20for%20users%20(Pilot%20Phase)%20to%20ensure%20the%20O365%20Groups%20follow%20naming%20conventions.%20The%20Admin%20itself%20remains%20as%20Task-Admin%20but%20not%20as%20Member%20(due%20to%20data%20privacy%20creasons)%20and%20then%20adds%20the%20persons%20into%20the%20group.%3C%2FLINGO-BODY%3E%3CLINGO-SUB%20id%3D%22lingo-sub-34346%22%20slang%3D%22en-US%22%3ERe%3A%20Planner%20restrictions%20if%20user%20can't%20create%20O365%20Groups%20and%20plans%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-34346%22%20slang%3D%22en-US%22%3E%3CP%3EYou%20need%20to%20use%20New-MsolSettings%20and%20Set-MsolSettings%20to%20restrict%20the%20O365%20Groups%20creation%20permission.%3C%2FP%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3CPRE%3E%24Gpmodify%20%3D%20Get-MsolSettingTemplate%20-TemplateId%2062375ab9-6b52-47ed-826b-58e47e0e304b%0A%24Setobj%20%3D%20%24Gpmodify.CreateSettingsObject()%0A%24Setobj%5B%E2%80%9CEnableGroupCreation%E2%80%9D%5D%20%3D%20%E2%80%9Cfalse%E2%80%9D%0A%23Security%20Group's%20ID%0A%24Setobj%5B%E2%80%9CGroupCreationAllowedGroupId%E2%80%9D%5D%20%3D%20%22xxxxxxxx-xxxx-xxxx-xxxx-xxxxxxxx%22%0ANew-MsolSettings%20%E2%80%93SettingsObject%20%24Setobj%3C%2FPRE%3E%3CP%3EFor%20more%20information%2C%20follow%20this%20%3CA%20href%3D%22http%3A%2F%2Fwww.jijitechnologies.com%2Fblogs%2Fdisable-office365-group-creation-in-azureAD%22%20target%3D%22_blank%22%20rel%3D%22nofollow%20noopener%20noreferrer%22%3Eblog%3C%2FA%3E%26nbsp%3B%3C%2FP%3E%3C%2FLINGO-BODY%3E%3CLINGO-SUB%20id%3D%22lingo-sub-33956%22%20slang%3D%22en-US%22%3ERe%3A%20Planner%20restrictions%20if%20user%20can't%20create%20O365%20Groups%20and%20plans%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-33956%22%20slang%3D%22en-US%22%3EAnd%20you%20can%20absolutely%20control%20Groups%20creation%20no%20matter%20where%20you%20try%20to%20create%20them%20by%20means%20of%20an%20Azure%20AD%20policy%3C%2FLINGO-BODY%3E%3CLINGO-SUB%20id%3D%22lingo-sub-33891%22%20slang%3D%22en-US%22%3ERe%3A%20Planner%20restrictions%20if%20user%20can't%20create%20O365%20Groups%20and%20plans%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-33891%22%20slang%3D%22en-US%22%3EThey%20will%20have%20the%20full%20ability%20to%20use%20Planner%20%2F%20Groups%2C%20no%20problem.%3CBR%20%2F%3E%3CBR%20%2F%3EWe%20have%20done%20this%20also%20(limited%20creation)%2C%20and%20see%20no%20restriction%20on%20any%20of%20the%20plans%2FO365%20Groups.%3C%2FLINGO-BODY%3E
New Contributor

We would like to allow only certain users to create Office 365 Groups and understand that the same set of users will only be able to create plans in Planner. Will the users who can't create plans and O365 Groups be able to use Planner ? Are there any restrictions of things they can't do in Planner due to their lack of access to create plans and O365 Groups?

 

Thanks.

4 Replies
They will have the full ability to use Planner / Groups, no problem.

We have done this also (limited creation), and see no restriction on any of the plans/O365 Groups.
And you can absolutely control Groups creation no matter where you try to create them by means of an Azure AD policy

You need to use New-MsolSettings and Set-MsolSettings to restrict the O365 Groups creation permission.

 

$Gpmodify = Get-MsolSettingTemplate -TemplateId 62375ab9-6b52-47ed-826b-58e47e0e304b
$Setobj = $Gpmodify.CreateSettingsObject()
$Setobj[“EnableGroupCreation”] = “false”
#Security Group's ID
$Setobj[“GroupCreationAllowedGroupId”] = "xxxxxxxx-xxxx-xxxx-xxxx-xxxxxxxx"
New-MsolSettings –SettingsObject $Setobj

For more information, follow this blog 

We did the same here. Only Admins can create Plans for users (Pilot Phase) to ensure the O365 Groups follow naming conventions. The Admin itself remains as Task-Admin but not as Member (due to data privacy creasons) and then adds the persons into the group.