diff --git a/sharepoint/sharepoint-ps/Microsoft.Online.SharePoint.PowerShell/Get-SPORestrictedSiteCreationForApps.md b/sharepoint/sharepoint-ps/Microsoft.Online.SharePoint.PowerShell/Get-SPORestrictedSiteCreationForApps.md new file mode 100644 index 000000000..312198c32 --- /dev/null +++ b/sharepoint/sharepoint-ps/Microsoft.Online.SharePoint.PowerShell/Get-SPORestrictedSiteCreationForApps.md @@ -0,0 +1,94 @@ +--- +external help file: Microsoft.Online.SharePoint.PowerShell.dll-Help.xml +Module Name: Microsoft.Online.SharePoint.PowerShell +online version: https://learn.microsoft.com/powershell/module/microsoft.online.sharepoint.powershell/get-sporestrictedsitecreationforapps +applicable: SharePoint Online +title: Get-SPORestrictedSiteCreationForApps +schema: 2.0.0 +author: vgaddam-pm +ms.author: vgaddam +ms.reviewer: +--- + +# Get-SPORestrictedSiteCreationForApps + +## SYNOPSIS + +This cmdlet allows SharePoint Administrators to check the current configuration of the restricted site creation for apps feature. + +## SYNTAX + +``` +Get-SPORestrictedSiteCreationForApps [-SiteType ] [] +``` + +## DESCRIPTION + +This cmdlet obtains the current configuration information for the restricted site creation for apps feature, including whether it is enabled, the current mode, and the current policies. + +> [!Note] +> This feature is currently in preview and may not be available in your tenant. + +## EXAMPLES + +### Example 1 + +```powershell +Get-SPORestrictedSiteCreationForApps +``` + +Example 1 returns all configuration information for the restricted site creation for apps feature. This includes whether the feature is enabled, the current mode (deny or allow), and the app IDs configured for each site type. + +### Example 2 + +```powershell +Get-SPORestrictedSiteCreation –SiteType Communication +``` + +Example 2 returns a comma-separated list of the app IDs for the `Communication` site type. Depending on whether restricted site creation is in allow or deny mode, these apps are either allowed or denied from creating SharePoint communication sites. + +## PARAMETERS + +### -SiteType + +> Applicable: SharePoint Online +When provided, only return the Microsoft Entra security groups configured for the specified site type. + +PARAMVALUE: All | SharePoint | OneDrive | Team | Communication +- All - OneDrive and all SharePoint sites +- SharePoint - All SharePoint sites (but not OneDrive) +- OneDrive - Only OneDrive +- Team - Only SharePoint team sites (group-connected and classic) +- Communication - Only SharePoint communication sites + +```yaml +Type: Microsoft.SharePoint.Administration.SPOnlineProvisioning.RestrictedSiteCreationSiteType +Parameter Sets: (All) +Aliases: +Accepted values: All, SharePoint, OneDrive, Team, Communication + +Required: False +Position: Named +Default value: None +Accept pipeline input: False +Accept wildcard characters: False +``` + +### CommonParameters +This cmdlet supports the common parameters: -Debug, -ErrorAction, -ErrorVariable, -InformationAction, -InformationVariable, -OutVariable, -OutBuffer, -PipelineVariable, -Verbose, -WarningAction, and -WarningVariable. For more information, see [about_CommonParameters](https://go.microsoft.com/fwlink/?LinkID=113216). + +## INPUTS + +### None + +## OUTPUTS + +### System.Object + +## NOTES + +## RELATED LINKS + +[Getting started with SharePoint Online Management Shell](/powershell/sharepoint/sharepoint-online/connect-sharepoint-online) + +[Set-SPORestrictedSiteCreationForApps](Set-SPORestrictedSiteCreationForApps.md) diff --git a/sharepoint/sharepoint-ps/Microsoft.Online.SharePoint.PowerShell/Microsoft.Online.SharePoint.PowerShell.md b/sharepoint/sharepoint-ps/Microsoft.Online.SharePoint.PowerShell/Microsoft.Online.SharePoint.PowerShell.md index 85890993c..50fe76c51 100644 --- a/sharepoint/sharepoint-ps/Microsoft.Online.SharePoint.PowerShell/Microsoft.Online.SharePoint.PowerShell.md +++ b/sharepoint/sharepoint-ps/Microsoft.Online.SharePoint.PowerShell/Microsoft.Online.SharePoint.PowerShell.md @@ -279,6 +279,9 @@ This cmdlet enables the administrator to check status of all active and availabl ### [Get-SPORestrictedSiteCreation](Get-SPORestrictedSiteCreation.md) This cmdlet allows SharePoint administrators to check the current configuration of the restricted site creation feature. +### [Get-SPORestrictedSiteCreationForApps](Get-SPORestrictedSiteCreationForApps.md) +This cmdlet allows SharePoint administrators to check the current configuration of the restricted site creation for apps feature. > [!NOTE] > This feature is currently in preview and may not be available in your tenant. + ### [Get-SPOServicePrioritizationAppRegistrations](Get-SPOServicePrioritizationAppRegistrations.md) Retrieves the list of app registrations configured for service prioritization in SharePoint Online. @@ -726,6 +729,9 @@ Marks a site as one of multiple possible tenant's organizational news sites. Req ### [Set-SPORestrictedSiteCreation](Set-SPORestrictedSiteCreation.md) Sets or updates one or more group configurations for restricting site creation. +### [Set-SPORestrictedSiteCreationForApps](Set-SPORestrictedSiteCreationForApps.md) +Sets or updates one or more group configurations for restricting site creation for apps. > [!NOTE] > This feature is currently in preview and may not be available in your tenant. + ### [Set-SPOServicePrioritizationAppRegistration](Set-SPOServicePrioritizationAppRegistration.md) Updates an existing app registration for service prioritization in SharePoint Online. diff --git a/sharepoint/sharepoint-ps/Microsoft.Online.SharePoint.PowerShell/New-SPOContainerType.md b/sharepoint/sharepoint-ps/Microsoft.Online.SharePoint.PowerShell/New-SPOContainerType.md index 616402efa..0514f1e78 100644 --- a/sharepoint/sharepoint-ps/Microsoft.Online.SharePoint.PowerShell/New-SPOContainerType.md +++ b/sharepoint/sharepoint-ps/Microsoft.Online.SharePoint.PowerShell/New-SPOContainerType.md @@ -21,7 +21,7 @@ This cmdlet creates a new container type of standard or trial status. The standa ``` New-SPOContainerType [-ContainerTypeName] -OwningApplicationId [-ApplicationRedirectUrl ] [-TrialContainerType] [-IsPassThroughBilling] - [-IsGovernableByAdmin ] [-WhatIf] [-Confirm] [] + [-IsGovernableByAdmin ] [-IsArchiveEnabled ] [-WhatIf] [-Confirm] [] ``` ## DESCRIPTION @@ -64,6 +64,14 @@ New-SPOContainerType -ContainerTypeName ContosoLegal -OwningApplicationId 2ce032 In Example 4, the cmdlet creates a standard container type, ContosoLegal that has opted out of management through Microsoft-enabled administrator platforms. +### Example 5 + +```powershell +New-SPOContainerType -ContainerTypeName ContosoLegal -OwningApplicationId 2ce03211-353e-45d7-b487-8ac6981332cf -IsArchiveEnabled $true +``` + +In Example 5, the cmdlet creates a standard container type, ContosoLegal that supports archive and reactivate actions on its containers. + ## PARAMETERS ### -ApplicationRedirectUrl @@ -102,6 +110,24 @@ Accept pipeline input: False Accept wildcard characters: False ``` +### -IsArchiveEnabled + +> Applicable: SharePoint Online + +Use the `-IsArchiveEnabled` flag to enable archival of containers. Archival moves data to the cold tier, reducing storage costs. While archived, content is inaccessible until reactivated. Reactivation is immediate within the first seven days and can take up to 24 hours afterward. If you don't include this flag, the value defaults to `False`, and all archive API calls fail. After you update the flag, allow up to 24 hours for the change to take effect in the consuming tenant. + +```yaml +Type: System.Boolean +Parameter Sets: (All) +Aliases: + +Required: False +Position: Named +Default value: False +Accept pipeline input: False +Accept wildcard characters: False +``` + ### -IsGovernableByAdmin > Applicable: SharePoint Online diff --git a/sharepoint/sharepoint-ps/Microsoft.Online.SharePoint.PowerShell/Set-SPOContainerTypeConfiguration.md b/sharepoint/sharepoint-ps/Microsoft.Online.SharePoint.PowerShell/Set-SPOContainerTypeConfiguration.md index 6344015f5..ae882a962 100644 --- a/sharepoint/sharepoint-ps/Microsoft.Online.SharePoint.PowerShell/Set-SPOContainerTypeConfiguration.md +++ b/sharepoint/sharepoint-ps/Microsoft.Online.SharePoint.PowerShell/Set-SPOContainerTypeConfiguration.md @@ -24,7 +24,7 @@ Set-SPOContainerTypeConfiguration -ContainerTypeId [-DiscoverabilityDisab [-WhoCanShareAuthenticatedGuestAllowList ] [-OverrideTenantWhoCanShareAnonymousAllowList ] [-OverrideTenantWhoCanShareAuthenticatedGuestAllowList ] [-CopilotEmbeddedChatHosts ] - [-AnonymousLinkExpirationInDays ] [-WhatIf] [-Confirm] [] + [-AnonymousLinkExpirationInDays ] [-IsArchiveEnabled ] [-WhatIf] [-Confirm] [] ``` ## DESCRIPTION @@ -82,6 +82,14 @@ Set-SPOContainerTypeConfiguration -ContainerTypeId 4f0af585-8dcc-0000-223d-661eb ``` This example sets the host URLs for the container type with Id 4f0af585-8dcc-0000-223d-661eb2c604e4. +### Example 7 + +```powershell +Set-SPOContainerTypeConfiguration -ContainerTypeId 4f0af585-8dcc-0000-223d-661eb2c604e4 -IsArchiveEnabled $true +``` + +Example 7 enables support for archive and reactivate actions on all the containers of ContainerTypeId 4f0af585-8dcc-0000-223d-661eb2c604e4. + ## PARAMETERS ### -AnonymousLinkExpirationInDays @@ -171,6 +179,22 @@ Accept pipeline input: False Accept wildcard characters: False ``` +### -IsArchiveEnabled + +Use the `-IsArchiveEnabled` flag to enable archival of containers. Archival moves data to the cold tier, reducing storage costs. While archived, content is inaccessible until reactivated. Reactivation is immediate within the first seven days and can take up to 24 hours afterward. If you don't include this flag, the value defaults to `False`, and all archive API calls fail. After you update the flag, allow up to 24 hours for the change to take effect in the consuming tenant. + +```yaml +Type: System.Boolean +Parameter Sets: (All) +Aliases: + +Required: False +Position: Named +Default value: False +Accept pipeline input: False +Accept wildcard characters: False +``` + ### -OverrideTenantWhoCanShareAnonymousAllowList This setting determines if the container type `WhoCanShareAnonymousAllowList` overrides the tenant-level `WhoCanShareAnonymousAllowList`. diff --git a/sharepoint/sharepoint-ps/Microsoft.Online.SharePoint.PowerShell/Set-SPORestrictedSiteCreationForApps.md b/sharepoint/sharepoint-ps/Microsoft.Online.SharePoint.PowerShell/Set-SPORestrictedSiteCreationForApps.md new file mode 100644 index 000000000..04c29a2ed --- /dev/null +++ b/sharepoint/sharepoint-ps/Microsoft.Online.SharePoint.PowerShell/Set-SPORestrictedSiteCreationForApps.md @@ -0,0 +1,216 @@ +--- +external help file: Microsoft.Online.SharePoint.PowerShell.dll-Help.xml +Module Name: Microsoft.Online.SharePoint.PowerShell +online version: https://learn.microsoft.com/powershell/module/microsoft.online.sharepoint.powershell/set-sporestrictedsitecreationforapps +applicable: SharePoint Online +title: Set-SPORestrictedSiteCreationForApps +schema: 2.0.0 +author: vgaddam-pm +ms.author: vgaddam +ms.reviewer: jmcdowe +--- + +# Set-SPORestrictedSiteCreationForApps + +## SYNOPSIS + +Sets or updates one or more app configurations for restricting site creation. + +## SYNTAX + +``` +Set-SPORestrictedSiteCreationForApps [-Enabled ] [-Mode ] + [-SiteType ] [-RestrictedSiteCreationApps ] [-WhatIf] [-Confirm] + [] +``` + +## DESCRIPTION + +This cmdlet sets or updates the configuration or setting for the Restricted Site Creation For Apps feature. + +> [!Note] +> This feature is currently in preview and may not be available in your tenant. + +## EXAMPLES + +### Example 1 + +```powershell +Set-SPORestrictedSiteCreationForApps –Enabled:$true +``` + +Example 1 enables the restricted site creation for apps feature for the tenant. + +### Example 2 + +```powershell +Set-SPORestrictedSiteCreationForApps –Mode Allow +``` + +Example 2 sets restricted site creation for apps to allow mode. In this mode, an app is only able to create a site if that app is in the list specified for a matching site type. + +### Example 3 + +```powershell +Set-SPORestrictedSiteCreationForApps –SiteType "All" -RestrictedSiteCreationApps "281e395b-7316-4cb2-b5bb-8881426ee411" +``` + +Example 3 updates the policy for the `All` site type to apply to the app with the app ID 281e395b-7316-4cb2-b5bb-8881426ee411. This app is now either allowed or denied (depending on the current mode) from creating all OneDrive and SharePoint sites. + +### Example 4 + +```powershell +Set-SPORestrictedSiteCreationForApps –SiteType "Team" -RestrictedSiteCreationApps "78159241-04a9-41d2-8dd4-ac568e9766a3,1f95829b-e1c8-4406-b2be-508c36f4bca5" +``` + +Example 4 updates the policy for the `Team` site type to apply to the two apps specified. Both apps now either allowed or denied from creating Team sites, depending on the current mode. + +### Example 5 + +```powershell +Set-SPORestrictedSiteCreationForApps –SiteType "OneDrive" -RestrictedSiteCreationApps "" +``` + +Example 5 clears the policy for the `OneDrive` site type so that it no longer applies to any apps. + +## PARAMETERS + +### -Enabled + +> Applicable: SharePoint Online + +PARAMVALUE: true | false +Enables or disables Restricted Site Creation For Apps feature in tenant. + +```yaml +Type: System.Boolean +Parameter Sets: (All) +Aliases: + +Required: False +Position: Named +Default value: None +Accept pipeline input: False +Accept wildcard characters: False +``` + +### -Mode + +> Applicable: SharePoint Online + +Specifies whether policies allow or deny apps from creating sites. +PARAMVALUE: Deny | Allow +- Deny – an app will be blocked from creating a site if any policy applies to them. +- Allow – an app will only be allowed to create a site if a policy applies to them. + +> [!NOTE] +> The restricted site creation mode is shared across all site type policies. It is not possible to use deny mode for one site type and allow mode for a different site type. When the mode is changed, all policies are cleared. + +```yaml +Type: Microsoft.SharePoint.Administration.SPOnlineProvisioning.RestrictedSiteCreationMode +Parameter Sets: (All) +Aliases: +Accepted values: Deny, Allow + +Required: False +Position: Named +Default value: None +Accept pipeline input: False +Accept wildcard characters: False +``` + +### -RestrictedSiteCreationApps + +> Applicable: SharePoint Online + +A comma-separated list of up to 100 app IDs. When paired with the `–SiteType` parameter, defines a new policy which applies to the specified apps. +Set to the empty string `""` to clear the policy for a site type. + +```yaml +Type: System.String +Parameter Sets: (All) +Aliases: + +Required: False +Position: Named +Default value: None +Accept pipeline input: False +Accept wildcard characters: False +``` + +### -SiteType + +> Applicable: SharePoint Online + +When paired with the `–RestrictedSiteCreationApps` parameter, creates a new policy which applies to the specified types of sites. + +PARAMVALUE: All | SharePoint | OneDrive | Team | Communication +- All - OneDrive and all SharePoint sites +- SharePoint - All SharePoint sites (but not OneDrive) +- OneDrive - Only OneDrive +- Team - Only SharePoint team sites (group-connected and classic) +- Communication - Only SharePoint communication sites + +```yaml +Type: Microsoft.SharePoint.Administration.SPOnlineProvisioning.RestrictedSiteCreationSiteType +Parameter Sets: (All) +Aliases: +Accepted values: All, SharePoint, OneDrive, Team, Communication + +Required: False +Position: Named +Default value: None +Accept pipeline input: False +Accept wildcard characters: False +``` + +### -Confirm +Prompts you for confirmation before running the cmdlet. + +```yaml +Type: System.Management.Automation.SwitchParameter +Parameter Sets: (All) +Aliases: cf + +Required: False +Position: Named +Default value: None +Accept pipeline input: False +Accept wildcard characters: False +``` + +### -WhatIf +Shows what would happen if the cmdlet runs. +The cmdlet is not run. + +```yaml +Type: System.Management.Automation.SwitchParameter +Parameter Sets: (All) +Aliases: wi + +Required: False +Position: Named +Default value: None +Accept pipeline input: False +Accept wildcard characters: False +``` + +### CommonParameters + +This cmdlet supports the common parameters: -Debug, -ErrorAction, -ErrorVariable, -InformationAction, -InformationVariable, -OutVariable, -OutBuffer, -PipelineVariable, -Verbose, -WarningAction, and -WarningVariable. For more information, see [about_CommonParameters](https://go.microsoft.com/fwlink/?LinkID=113216). + +## INPUTS + +### None + +## OUTPUTS + +### System.Object + +## NOTES + +## RELATED LINKS + +[Getting started with SharePoint Online Management Shell](/powershell/sharepoint/sharepoint-online/connect-sharepoint-online) + +[Get-SPORestrictedSiteCreationForApps](Get-SPORestrictedSiteCreationForApps.md) diff --git a/sharepoint/sharepoint-ps/Microsoft.Online.SharePoint.PowerShell/Set-SPOTenant.md b/sharepoint/sharepoint-ps/Microsoft.Online.SharePoint.PowerShell/Set-SPOTenant.md index 466eac85e..219b5a1c3 100644 --- a/sharepoint/sharepoint-ps/Microsoft.Online.SharePoint.PowerShell/Set-SPOTenant.md +++ b/sharepoint/sharepoint-ps/Microsoft.Online.SharePoint.PowerShell/Set-SPOTenant.md @@ -139,7 +139,8 @@ Set-SPOTenant [-MinCompatibilityLevel ] [-MaxCompatibilityLevel ] [-OpticalCharacterRecognitionSelectedSitesListOperation ] [-DefaultContentCenterSite ] [-AllowWebPropertyBagUpdateWhenDenyAddAndCustomizePagesIsEnabled ] [-EnforceRequestDigest ] - [-RestrictResourceAccountAccess ] [-RestrictExternalSharingForAgents ] [] + [-RestrictResourceAccountAccess ] [-RestrictExternalSharingForAgents ] + [-AllowFileArchive ] [-AllowFileArchiveByDefault ] [] ``` ### ParameterSetContentTypeSyncSiteTemplatesList @@ -264,7 +265,8 @@ Set-SPOTenant [-MinCompatibilityLevel ] [-MaxCompatibilityLevel ] [-OpticalCharacterRecognitionSelectedSitesListOperation ] [-DefaultContentCenterSite ] [-AllowWebPropertyBagUpdateWhenDenyAddAndCustomizePagesIsEnabled ] [-EnforceRequestDigest ] - [-RestrictResourceAccountAccess ] [-RestrictExternalSharingForAgents ] [] + [-RestrictResourceAccountAccess ] [-RestrictExternalSharingForAgents ] + [-AllowFileArchive ] [-AllowFileArchiveByDefault ] [] ``` ### ParamSetMultipleSites @@ -390,7 +392,8 @@ Set-SPOTenant [-MinCompatibilityLevel ] [-MaxCompatibilityLevel ] [-OpticalCharacterRecognitionSelectedSitesListOperation ] [-DefaultContentCenterSite ] [-AllowWebPropertyBagUpdateWhenDenyAddAndCustomizePagesIsEnabled ] [-EnforceRequestDigest ] - [-RestrictResourceAccountAccess ] [-RestrictExternalSharingForAgents ] [] + [-RestrictResourceAccountAccess ] [-RestrictExternalSharingForAgents ] + [-AllowFileArchive ] [-AllowFileArchiveByDefault ] [] ``` ### InformationBarrier @@ -514,7 +517,8 @@ Set-SPOTenant [-MinCompatibilityLevel ] [-MaxCompatibilityLevel ] [-OpticalCharacterRecognitionSelectedSitesListOperation ] [-DefaultContentCenterSite ] [-AllowWebPropertyBagUpdateWhenDenyAddAndCustomizePagesIsEnabled ] [-EnforceRequestDigest ] - [-RestrictResourceAccountAccess ] [-RestrictExternalSharingForAgents ] [] + [-RestrictResourceAccountAccess ] [-RestrictExternalSharingForAgents ] + [-AllowFileArchive ] [-AllowFileArchiveByDefault ] [] ``` ### ParameterSetNameRestrictExternalSharing @@ -639,7 +643,8 @@ Set-SPOTenant [-MinCompatibilityLevel ] [-MaxCompatibilityLevel ] [-DefaultContentCenterSite ] [-AllowWebPropertyBagUpdateWhenDenyAddAndCustomizePagesIsEnabled ] [-EnforceRequestDigest ] [-RestrictResourceAccountAccess ] [-RestrictExternalSharingForAgents ] - -RestrictExternalSharing [-AddAppIdToList] [-RemoveAppIdFromList] [] + -RestrictExternalSharing [-AddAppIdToList] [-RemoveAppIdFromList] + [-AllowFileArchive ] [-AllowFileArchiveByDefault ] [] ``` ## DESCRIPTION @@ -1129,6 +1134,52 @@ Accept pipeline input: False Accept wildcard characters: False ``` +### -AllowFileArchive + +> Applicable: SharePoint Online + +Controls whether file-level archiving is allowed at the tenant level. This setting can be overridden for specific sites by the site-level flag of the same name and has no effect unless Microsoft 365 Archive is enabled for your organization. + +The valid values are: + +- True (default) - Allows users to manually archive files on sites where file-level archiving is also enabled. Manual archiving is limited to internal users with write access to the file. +- False - Blocks manual archiving for all files, regardless of the site-level setting. Admin-defined policies can still archive files automatically. + +```yaml +Type: Boolean +Parameter Sets: (All) +Aliases: + +Required: False +Position: Named +Default value: True +Accept pipeline input: False +Accept wildcard characters: False +``` + +### -AllowFileArchiveOnNewSitesByDefault + +> Applicable: SharePoint Online + +Specifies the default value of the `AllowFileArchive` property for newly created SharePoint sites. This determines whether new sites allow file-level archiving by default. Microsoft 365 Archive and the tenant-level `AllowFileArchive` setting must both be enabled for manual archiving to work when this property is set to True. + +The valid values are: + +- True (default) - Sets `AllowFileArchive` to True for all newly provisioned sites. Microsoft 365 Archive and the tenant-level `AllowFileArchive` setting must both be enabled for manual archiving to work on future provisioned sites. +- False - Sets `AllowFileArchive` to False for all newly provisioned sites. + +```yaml +Type: Boolean +Parameter Sets: (All) +Aliases: + +Required: False +Position: Named +Default value: True +Accept pipeline input: False +Accept wildcard characters: False +``` + ### -AllowGuestUserShareToUsersNotInSiteCollection > Applicable: SharePoint Online