禁用除某个组以外的所有站点创建

Question

我想将网站创建锁定到某个管理员suresh。我们为此创建了一个小组，但是我告诉SharePoint管理员以实现这一目标？

Answer 1

要锁定站点创建，您基本上需要使用Azure AD PowerShell运行一些PowerShell命令。用全局管理特权运行他们命令。

我假设您已经创建了一个Azure广告组，这些用户可以访问该网站。

$creds = Get-Credential
Connect-AzureAD -Credential $creds
$group = Get-AzureADGroup -All $True | Where-Object {$_.DisplayName -eq "ENTER GROUP DISPLAY NAME HERE"} 
$policySetting = Get-AzureADDirectorySetting | where-object {$_.displayname -eq "Group.Unified"}
if($policySetting -eq $null) {
    $template = Get-AzureADDirectorySettingTemplate | Where-Object {$_.DisplayName -eq "Group.Unified"}
    $settings = $template.CreateDirectorySetting()
    $settings["EnableGroupCreation"] = $false
    $settings["GroupCreationAllowedGroupId"] = $group.ObjectId
    $policySetting = New-AzureADDirectorySetting -DirectorySetting $settings
}
else{
    $policySetting["EnableGroupCreation"] = $false
    $policySetting["GroupCreationAllowedGroupId"] = $group.ObjectId    
    Set-AzureADDirectorySetting -Id $policySetting.Id -DirectorySetting $policySetting
}

链接：

安装Azure AD模块

使用Azure AD PowerShell V2