Managing M365 Group Resources

Jon Kilner 61 Reputation points
2024-07-04T09:32:18.26+00:00

I'm looking to use M365 groups to support the deployment of Sensitivity Labels. M365 groups are my only option as I need the group membership to be dynamic.

As you'll know, when you create an M365 group you get alot of 365 resources created at the same time e.g mailbox, sharepoint etc.

Now, none of these resources are needed and as the group will include 10s of 1000s of user, I don't want them using the group resources.

Looking at the Set-UnifiedGroup command I see there is an option for -IsMemberAllowedToEditContent https://video2.skills-academy.com/en-us/powershell/module/exchange/set-unifiedgroup?view=exchange-ps#-ismemberallowedtoeditcontent

However, there's no actual description of what this option does. Does it restrict content within everything (Sharepoint, OneNote, Mailbox etc)?

Searching online, there's nothing to explain what this command does. Asking copilot results in an answer with no cited references.

Microsoft 365
Microsoft 365
Formerly Office 365, is a line of subscription services offered by Microsoft which adds to and includes the Microsoft Office product line.
4,221 questions
0 comments
Accepted answer
  1. Vasil Michev 99,431 Reputation points MVP
    2024-07-04T15:27:28.11+00:00

    This parameter only affects mailbox items. There is no way to prevent the provisioning of all the Group's resources, if that's what you are after. And there is no (supported) way to restrict member's access to them, apart from small bits and pieces here and there.

    For your scenario, consider hiding the Group from the GAL, so members don't actually see it along with the -HiddenFromExchangeClientsEnabled flag.

    0 comments

0 additional answers

Sort by: Most helpful
Most helpful Newest Oldest