Once you've created some ShareGate Provisioning templates, we recommend that you enforce them by turning off self-serve team creation in Microsoft 365. Your colleagues can still create teams through ShareGate's end-user app.
How to
You can turn off self-serve team creation for most of your organization by limiting Microsoft 365 group creation to a single group of users. For more information, see Microsoft's article, Manage who can create Microsoft 365 Groups.
Overview
Here's what to expect from the process:
Create a group or security group for your organization's admins.
Run a PowerShell script to limit group creation rights to the group you created in the previous step.
Microsoft provides the script.
Verify that the script worked as intended.
Tip: If you haven't done so, announce ShareGate's end-user app to your co-workers with one of our announcement templates so they know where to create teams.
Considerations
Global admins can still create groups as usual through:
Microsoft 365 admin center
SharePoint
Planner
Exchange
Users who aren't part of the admin group won't be able to create groups via:
Outlook
SharePoint
Viva Engage
Microsoft Teams
Planner
Power BI (classic)
Project for the web / Roadmap
ShareGate's end-user app uses your application permissions to create teams. That means ShareGate app will be the team creator in Microsoft 365 and Microsoft Graph API for all teams created via provisioning templates.
ShareGate team creation and approval actions appear in your activity log.