Introducing the Groups Admin Role
Today, we are thrilled to announce that the the Groups admin role in Azure Active Directory (Azure AD) is now generally available. This new Azure Active Directory role enables you to perform group management tasks for and Azure AD security groups without requiring Global administrator permissions. Users with the Groups administrator role can use the Microsoft 365 Admin center, the Azure portal and other methods to create, edit, delete, and restore groups, and manage Office 365 Groups policies (example - creation, naming, and expiration policies). Figure 1 - Managing Groups in the Microsoft 365 Admin center Figure 2 - Managing Groups in the Azure portal You can provision the Groups admin role using Azure AD PowerShell: #Below steps need to be completed only once to install the Azure AD scripts Install-Module -Name AzureAD #Connect (use privileged role) Connect-AzureAD # Get the user to be assigned the role, replacing foo@contoso.com with the email address of the user $roleMember = Get-AzureADUser -SearchString "foo@contoso.com" # Enable the role for the tenant (skip this step if you have already enabled the role for your tenant). If you have already enabled the role, you will get an error (which you can ignore) $newRole = Enable-AzureADDirectoryRole -RoleTemplateId "fdd7a751-b60b-444a-984c-02652fe8fa1c" # Get the newly added role - replace the role template Id as per need $newRole = Get-AzureADDirectoryRole -Filter "roleTemplateId eq 'fdd7a751-b60b-444a-984c-02652fe8fa1c'" # Add the user to this role - copy the object Id from the output of the above command and use below Add-AzureADDirectoryRoleMember -ObjectId $newRole.ObjectId -RefObjectId $roleMember.ObjectId Limitations There are a few limitations that we are looking to address soon: The admin role is designed mainly for Office 365 groups and cannot manage other group types like distribution groups, mail-enabled security groups or shared mailboxes. This role cannot be used to update a Group’s email address or modify external mail or mail delivery options in the Microsoft 365 admin center. You cannot use Exchange PowerShell cmdlets to manage Office 365 Groups. A Groups admin cannot manage audit logs, access reports, or guest settings. We would love to hear your feedback or suggestions. Leave a comment here or reach out to us on user voice.dynamic group based on assigned license
Hi, is it possible to create a group with users based on a assigned license? So i want to include all users into this specific group who has e.g. an E3 license assigned, but not an E5. It seems, that the only way is to use the a ServicePlan name, not a SKU name, isn't it? Even better would be a dynamic membership rule based on the SKU, not on a ServicePlan. What i tried to do: 1. Get-MsolAccountSKU to find out the SKU name 2. Created a dynamic group without knowing which syntax to use :D 3. Used this dynamic membership rule as a workaround: (user.assignedPlans -any ((assignedPlan.service -match "NAME") -and (assignedPlan.capabilityStatus -eq "Enabled"))) (I found the ServicePlan names viaGet-MsolAccountSku | Where-Object {$_.SkuPartNumber -eq “ENTERPRISEPREMIUM”} | ForEach-Object {$_.ServiceStatus} Thank you ina advance. Patrick :)Hiding Office 365 Groups Created by Teams from Exchange Clients
Teams now hides the Office 365 Groups that it creates from Exchange clients (Outlook, OWA, and the mobile apps). That’s as it should be for groups created for new teams. If you want to hide groups created for older teams, you can run the Set-UnifiedGroup cmdlet, but that soon becomes boring when you might have hundreds of groups to process. PowerShell to the rescue once again. https://www.petri.com/hiding-office-365-groups-exchange-clientsConvert O356 Group to personal mailbox
Im trying to convert a O365 group to a personal mailbox. I'll do it manually, because I know that there is no way to do this in Exchange Center. My O365 group is client1@mydomain.com. I already created a personal mailbox named client1-mail@mydomain.com So this is my plan: Migrate all the mails from the group to the personal mailbox Change group mailbox alias to client1-old@mydomain.com Change personal mailbox alias to client1@mydomain.com Do you think this is possible? is the best approach? and finally, is there a way to send all the O365 old mails to the personal mailbox? Thank you in advance and sorry about my english.Calendar items not sent to new members of group
Hello, I have created some calendar items in outlook that are sent to a group. Whenever I make a change in that group (either add or delete members) this calendar item is not updated. This means that new group members do not receive an invitation for existing meetings. What I need to do to resolve this, is to edit each such meeting, eg make a change in description, and then send it again. Only this way the new group members will get invited. I come from Google, where this feature works flawlessly and it seems very strange for outlook to force me to update each calendar item, just to update the recipients. It kind of defeats the whole purpose of using groups in calendar. Is there any way you can fix this please? Thank you! KostasNew Group Members not seeing Appointments
We are trying to determine why members that recently have joined a group do not see meetings that were scheduled before they joined, but are set for future dates. The one particular instance I'm chasing is a recurring meeting that was created before I joined the group. The person who created the invite has also updated the meeting details, should this not kick off some trigger to new groupies? Office 365 support has indicated that this is expected behavior. Would like to get a firm answer.