Turn off self-serve team creation in Microsoft 365

Once you've created some ShareGate provisioning templates, enforcing them by turning off self-serve team creation in Microsoft 365 is a good idea. Your colleagues can still create teams through ShareGate's end-user app.

How-to

You can turn off self-serve team creation for most of your organization by limiting Microsoft 365 group creation to a single group of users. To learn how, see Microsoft's documentation here.

Overview

Here's what to expect from the process:

1. Create a group or security group for your organization's admins.
2. Run a PowerShell script to limit group creation rights to the group you created in the previous step.
   • Microsoft provides the script.
3. Verify that the script worked as intended.

Tip: If you haven't yet done so, be sure to announce ShareGate's end-user app to your co-workers so they know where to create teams.

Considerations

• Global admins can still create groups as usual through:
  • Microsoft 365 admin center
  • SharePoint
  • Planner
  • Exchange
• Users who aren't part of the admin group won't be able to create groups via:
  • Outlook
  • SharePoint
  • Viva Engage
  • Microsoft Teams
  • Planner
  • Power BI (classic)
  • Project for the web / Roadmap
• ShareGate's end-user app uses your application permissions to create teams. That means ShareGate app will be the team creator in Microsoft 365 and Microsoft Graph API for all teams created via provisioning templates.
• ShareGate team creation and approval actions appear in your activity log.