question

ox1ygen avatar image
0 Votes"
ox1ygen asked ·

"AllowToAddGuests = False" doesn't work

Hello,

I have a tenant wide "Group.Unified" setting with template 62375ab9-6b52-47ed-826b-58e47e0e304b.

Here are a few parameters of the setting:

     {
         "name": "AllowGuestsToBeGroupOwner",
         "value": "False"
     },
     {
         "name": "AllowGuestsToAccessGroups",
         "value": "True"
     },
     {
         "name": "AllowToAddGuests",
         "value": "False"
     } 

I have been waiting for 24 hours for it to be propagated. So, I believe solution to wait for some time doesn't suit me. I suppose that "AllowToAddGuests = False" means that I won't be able to add any users with userType "Guest" to my office365 group. Unfortunately, it hasn't worked at all, but "AllowGuestsToBeGroupOwner = False" works just fine.

I have tried setting AllowToAddGuests to True and then I have set AllowToAddGuests to False in my Group.Unified.Guest settings for a specific office 365 group. Still, no success.

Tell me please what I am doing wrong. Should this AllowToAddGuests setting work?

Thanks in advance.

azure-active-directory
10 |1000 characters needed characters left characters exceeded

Up to 10 attachments (including images) can be used with a maximum of 3.0 MiB each and 30.0 MiB total.

1 Answer

MarileeTurscak avatar image
0 Votes"
MarileeTurscak answered ·

Is there something overriding the setting?

This setting may be overridden and become read-only if EnableMIPLabels is set to True and a guest policy is associated with the sensitivity label assigned to the group. If the AllowToAddGuests setting is set to False at the tenant level, any AllowToAddGuests setting at the group level is ignored. If you want to enable guest access for only a few groups, you must set AllowToAddGuests to be true at the tenant level, and then selectively disable it for specific groups.

https://docs.microsoft.com/en-us/azure/active-directory/users-groups-roles/groups-settings-cmdlets

· 1 · Share
10 |1000 characters needed characters left characters exceeded

Up to 10 attachments (including images) can be used with a maximum of 3.0 MiB each and 30.0 MiB total.

Thank you for your response, @MarileeTurscak! Attached my group settings for clarification. 7167-groupsettings.txt

As for EnableMIPLabels:

{ "name": "EnableMIPLabels", "value": "False" }

My office 365 groups do not have any setting nor policies associated with them. Any other suggestions on why this setting may not work properly? (AllowGuestsToBeGroupOwner works just fine)

0 Votes 0 · ·
groupsettings.txt (2.0 KiB)