question

GoodResource avatar image
0 Votes"
GoodResource asked EmilyDu-MSFT answered

Make All Teams Site read only for group of users but keep editable for rest Powershell

Hi,

We have a requirment, where we want Team site in such a way that no particular group of users should be able to share/upload files on Teams.
- I am aware to disable onedrive for those users so that they can't share or upload files on chat.
- I am also aware that from Site permission, if i take off the setting and make the members read only, they will not be able to share files on Teams site.

I am looking for a powershell script where i can run for all Team site, where group of users won't be able to upload/share files on Site but owners and members can.



office-sharepoint-onlineoffice-teams-windows-itpromicrosoft-graph-teamwork
5 |1600 characters needed characters left characters exceeded

Up to 10 attachments (including images) can be used with a maximum of 3.0 MiB each and 30.0 MiB total.

EmilyDu-MSFT avatar image
0 Votes"
EmilyDu-MSFT answered GoodResource commented

@GoodResource

For a team site collection, you could change Site sharing settings to control who could share files. And according to my research, there is currently no complete PowerShell command that can support to change the Site sharing settings.

197286-image.png


If the answer is helpful, please click "Accept Answer" and kindly upvote it. If you have extra questions about this answer, please click "Comment".
Note: Please follow the steps in our documentation to enable e-mail notifications if you want to receive the related email notification for this thread.



image.png (29.5 KiB)
· 4
5 |1600 characters needed characters left characters exceeded

Up to 10 attachments (including images) can be used with a maximum of 3.0 MiB each and 30.0 MiB total.

@EmilyDu-MSFT,

I have tried this already, this still lets the members to share and upload files on team site via MS teams. Once i make the entire team site read only then only members not able to upload files. But that doesn't give control over which user i want to be read only and which i not.

For example: There can be a scenario where an owner creates a Team site on MS teams, and add multiple members on it. Out of those members some shouldn't be able to upload/share files on those teams and corresponding channels.

0 Votes 0 ·

@GoodResource

In the Teams, if users are in the Member group, they can upload files. There is no option to let several users in the Member group not upload files.

0 Votes 0 ·

@GoodResource

I’m checking how the things are going on about this issue. Whether the answer helps you?

If there is any problem with this issue, feel free to let me know.

0 Votes 0 ·

@EmilyDu-MSFT ,


This is applicable for MS teams. I found below article and this way i can restrict users to share/upload any files over chat or teams channel. It is a great article and exactly what i wanted to achieve. Basically we disabled onedrive for those users, deleted the onedrive personal site if they have created already and then as final step apply file restriction teams policy as below to those users.


https://docs.microsoft.com/en-us/microsoftteams/turn-off-teams-native-file-upload-policy

0 Votes 0 ·
EmilyDu-MSFT avatar image
0 Votes"
EmilyDu-MSFT answered

@GoodResource

I'm glad to hear you solve the problem ,if you have any issue about SharePoint, you are welcome to raise a ticket in this forum.

By the way, since the Microsoft Q&A community has a policy that "The question author cannot accept their own answer. They can only accept answers by others.". and according to the scenario introduced here: Answering your own questions on Microsoft Q&A, I would make a brief summary of this thread:

[Make All Teams Site read only for group of users but keep editable for rest Powershell]

Issue Symptom:
We have a requirement, where we want Team site in such a way that no particular group of users should be able to share/upload files on Teams.
- I am aware to disable onedrive for those users so that they can't share or upload files on chat.
- I am also aware that from Site permission, if i take off the setting and make the members read only, they will not be able to share files on Teams site.

I am looking for a powershell script where i can run for all Team site, where group of users won't be able to upload/share files on Site but owners and members can.

Current status:
This is applicable for MS teams. I found below article and this way i can restrict users to share/upload any files over chat or teams channel. It is a great article and exactly what i wanted to achieve. Basically we disabled onedrive for those users, deleted the onedrive personal site if they have created already and then as final step apply file restriction teams policy as below to those users.

https://docs.microsoft.com/en-us/microsoftteams/turn-off-teams-native-file-upload-policy

You could click the "Accept Answer" button for this summary to close this thread, and this can make it easier for other community member's to see the useful information when reading this thread. Thanks for your understanding!


If the answer is helpful, please click "Accept Answer" and kindly upvote it. If you have extra questions about this answer, please click "Comment".
Note: Please follow the steps in our documentation to enable e-mail notifications if you want to receive the related email notification for this thread.



5 |1600 characters needed characters left characters exceeded

Up to 10 attachments (including images) can be used with a maximum of 3.0 MiB each and 30.0 MiB total.