u/Maranakidu

▲ 6 r/AZURE+1 crossposts

Restricting SharePoint site and m365 groups creation

I am planning to disable the ability for users to create SharePoint sites on their own through SharePoint, OneDrive, REST API, PnP commands, and Teams.

I understand this can be configured from the SharePoint Admin Center. For Teams, I am planning to disable Microsoft 365 Group creation by users through Entra ID → Groups → General.

I am also aware this change will prevent users from:
- Creating plans in Planner
- Creating groups from Outlook
- Creating communities in Viva Engage
- Creating certain legacy Power BI workspaces
- Creating some older Project for the Web workspaces

From my understanding, the impact on Power BI and Project for the Web should be minimal/negligible.

I had a couple of questions:

  1. Does this approach sound correct from a governance and best-practice perspective?
    Our intention is to prevent general users from creating Microsoft 365 Groups. At this point, we are not planning to use a dedicated security group to allow limited users to create groups.

  2. Do you have any recommendations or best practices for managing the creation process going forward for:
    - Planner plans
    - Outlook groups
    - Teams and channels

For example, would you recommend a request/approval process, delegated owners, automation, or another governance model?

reddit.com
u/Maranakidu — 6 days ago