sticky
[Forum FAQ] How to create modern Team sites without Office 365 Groups in SharePoint Online home page RRS feed

  • General discussion

  • By default, we can only create modern Team sites with Office 365 groups and communication sites via “Create Site” command in SharePoint home page.

    To create modern Team Sites without Office 365 Groups in SharePoint Online home page, we can restrict Office 365 Group creation to the members of a particular security group. Then, when the users who aren’t members of this security group access SharePoint Online home page, they will create Team sites without Office 365 Groups.

    To restrict Office 365 Group creation to the members of a particular security group, we can follow the steps below:

    1.  Create a security group for users who need to create Office 365 Groups. 

    In the admin center, go to the Groups > Groups page > Add a group > Choose Security as the group type > Give a name > Finish setting up the security group, adding people or other security groups who you want to be able to create Groups in your org.

    2.  Install the preview version of the Azure Active Directory PowerShell for Graph. 

    3.  Run PowerShell commands below to restrict Office 365 Group creation to the members of the security group:

    $GroupName = "<SecurityGroupName>"
    $AllowGroupCreation = "False"
    
    Connect-AzureAD
    
    $settingsObjectID = (Get-AzureADDirectorySetting | Where-object -Property Displayname -Value "Group.Unified" -EQ).id
    if(!$settingsObjectID)
    {
        $template = Get-AzureADDirectorySettingTemplate | Where-object {$_.displayname -eq "group.unified"}
        $settingsCopy = $template.CreateDirectorySetting()
        New-AzureADDirectorySetting -DirectorySetting $settingsCopy
        $settingsObjectID = (Get-AzureADDirectorySetting | Where-object -Property Displayname -Value "Group.Unified" -EQ).id
    }
    
    $settingsCopy = Get-AzureADDirectorySetting -Id $settingsObjectID
    $settingsCopy["EnableGroupCreation"] = $AllowGroupCreation
    
    if($GroupName)
    {
        $settingsCopy["GroupCreationAllowedGroupId"] = (Get-AzureADGroup -SearchString $GroupName).objectid
    }
    
    Set-AzureADDirectorySetting -Id $settingsObjectID -DirectorySetting $settingsCopy
    (Get-AzureADDirectorySetting -Id $settingsObjectID).Values

    4.  Check the results in Windows PowerShell

    • Before turning on the group creation restriction, there is no value for “GroupCreationAllowedGroupId” and the value of “EnableroupCreation” is True:

    • After running PowerShell commands above to turn on the group creation restriction, there is the group id of AllowedtoCreateGroups and the value of “EnableroupCreation” is False:

    5.  Check the results in SharePoint Online home page

    Please note: We need to wait at least 24 hours +   to bring this setting into effect in SharePoint Online home page.

    • Users who are members of this security group will create Team sites with Office 365 Groups via “Create Site” command in SharePoint home page:


    • Users who aren’t members of this security group will create Team sites without Office 365 Groups:



    ------------------------------------------------------------------------------------ 

    Reference:
    Updates to SharePoint self-service site creation
    Manage who can create Office 365 Groups 



    • Edited by ForumFAQ Tuesday, November 19, 2019 3:26 AM
    Tuesday, November 19, 2019 3:14 AM