Managing M365 Group Resources

Jon Kilner 61 Reputation points
2024-07-04T09:32:18.26+00:00

I'm looking to use M365 groups to support the deployment of Sensitivity Labels. M365 groups are my only option as I need the group membership to be dynamic.

As you'll know, when you create an M365 group you get alot of 365 resources created at the same time e.g mailbox, sharepoint etc.

Now, none of these resources are needed and as the group will include 10s of 1000s of user, I don't want them using the group resources.

Looking at the Set-UnifiedGroup command I see there is an option for -IsMemberAllowedToEditContent https://learn.microsoft.com/en-us/powershell/module/exchange/set-unifiedgroup?view=exchange-ps#-ismemberallowedtoeditcontent

However, there's no actual description of what this option does. Does it restrict content within everything (Sharepoint, OneNote, Mailbox etc)?

Searching online, there's nothing to explain what this command does. Asking copilot results in an answer with no cited references.

Microsoft 365
Microsoft 365
Formerly Office 365, is a line of subscription services offered by Microsoft which adds to and includes the Microsoft Office product line.
4,877 questions
Office Management
Office Management
Office: A suite of Microsoft productivity software that supports common business tasks, including word processing, email, presentations, and data management and analysis.Management: The act or process of organizing, handling, directing or controlling something.
2,145 questions
0 comments No comments
{count} votes

Accepted answer
  1. Vasil Michev 105.6K Reputation points MVP
    2024-07-04T15:27:28.11+00:00

    This parameter only affects mailbox items. There is no way to prevent the provisioning of all the Group's resources, if that's what you are after. And there is no (supported) way to restrict member's access to them, apart from small bits and pieces here and there.

    For your scenario, consider hiding the Group from the GAL, so members don't actually see it along with the -HiddenFromExchangeClientsEnabled flag.

    0 comments No comments

0 additional answers

Sort by: Most helpful

Your answer

Answers can be marked as Accepted Answers by the question author, which helps users to know the answer solved the author's problem.