Skip to main content
All CollectionsProtectProvisioningGeneral
Turn off self-serve team creation in Microsoft 365
Turn off self-serve team creation in Microsoft 365
Updated over a week ago

Once you've created some ShareGate Provisioning templates, we recommend that you enforce them by turning off self-serve team creation in Microsoft 365. Your colleagues can still create teams through ShareGate's end-user app.

How to

You can turn off self-serve team creation for most of your organization by limiting Microsoft 365 group creation to a single group of users. For more information, see Microsoft's article, Manage who can create Microsoft 365 Groups.

Overview

Here's what to expect from the process:

  1. Create a group or security group for your organization's admins.

  2. Run a PowerShell script to limit group creation rights to the group you created in the previous step.

    • Microsoft provides the script.

  3. Verify that the script worked as intended.

Tip: If you haven't done so, announce ShareGate's end-user app to your co-workers with one of our announcement templates so they know where to create teams.

Considerations

  • Global admins can still create groups as usual through:

    • Microsoft 365 admin center

    • SharePoint

    • Planner

    • Exchange

  • Users who aren't part of the admin group won't be able to create groups via:

    • Outlook

    • SharePoint

    • Viva Engage

    • Microsoft Teams

    • Planner

    • Power BI (classic)

    • Project for the web / Roadmap

  • ShareGate's end-user app uses your application permissions to create teams. That means ShareGate app will be the team creator in Microsoft 365 and Microsoft Graph API for all teams created via provisioning templates.

  • ShareGate team creation and approval actions appear in your activity log.

Did this answer your question?