Skip to content

Add ViewUpload setting to SPOTenant, add AnonymousLinkExpirationInDays to SPOContainerTypeConfiguration #898

New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Merged
aditisrivastava07 merged 7 commits into from
Jun 4, 2025
Merged

Add ViewUpload setting to SPOTenant, add AnonymousLinkExpirationInDays to SPOContainerTypeConfiguration #898

Show file tree
Hide file tree
Changes from all commits
Commits
Show all changes
7 commits
Select commit Hold shift + click to select a range
5978546
Update Set-SPOTenant.md
hhhults Mar 25, 2025
c8d6514
Merge branch 'MicrosoftDocs:main' into main
hhhults Jun 2, 2025
e2a7a23
add AnonymousLinkExpirationInDays to Set-SPOContainerTypeConfiguration
hhhults Jun 2, 2025
2f75c0d
fix comments
hhhults Jun 3, 2025
4c6470e
fix comments
hhhults Jun 3, 2025
72003fa
capitalization
hhhults Jun 3, 2025
9307247
revert none value addition
hhhults Jun 3, 2025
File filter

Filter by extension

Filter by extension
Conversations
Failed to load comments.
Loading
Jump to
Jump to file
Failed to load files.
Loading
Diff view
Diff view
155 changes: 50 additions & 105 deletions sharepoint/sharepoint-ps/sharepoint-online/Set-SPOContainerTypeConfiguration.md
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -22,7 +22,8 @@ Set-SPOContainerTypeConfiguration -ContainerTypeId <Guid> [-DiscoverabilityDisab
[-SharingRestricted <Boolean>] [-ApplicationRedirectUrl <String>] [-WhoCanShareAnonymousAllowList <Guid[]>]
[-WhoCanShareAuthenticatedGuestAllowList <Guid[]>] [-OverrideTenantWhoCanShareAnonymousAllowList <Boolean>]
[-OverrideTenantWhoCanShareAuthenticatedGuestAllowList <Boolean>]
[[-CopilotEmbeddedChatHosts] <System.Collections.Generic.List`1[System.String]>] [-WhatIf] [-Confirm]
[[-CopilotEmbeddedChatHosts] <System.Collections.Generic.List`1[System.String]>]
[-AnonymousLinkExpirationInDays <Int32>] [-WhatIf] [-Confirm]
[<CommonParameters>]
```

Expand Down Expand Up @@ -83,38 +84,25 @@ This example sets the host URLs for the container type with Id 4f0af585.

## PARAMETERS

### -DiscoverabilityDisabled

As a SharePoint Administrator or Global Administrator in Microsoft 365, you can control how your content appears in the Microsoft 365 experience. The default value for this parameter is True, which hides the SharePoint Embedded application content throughout the Microsoft 365 environment, including on office.com, onedrive.com, in recommended sections, or through other Microsoft intelligent file discovery features.
If you opt into the Microsoft 365 experience, your files will be integrated into Microsoft 365 environment, participating in intelligent file discovery.

PARAMVALUE: $true | $false

```yaml
Type: Boolean
Applicable: SharePoint Embedded
Position: Named
Required: False
Default value: True
Accept pipeline input: False
Accept wildcard characters: False
```

### -SharingRestricted

SharePoint Embedded offers a role-based sharing model that allows developers to configure file-sharing permissions based on container permission roles, offering a choice between a restrictive and an open sharing model. The open sharing model allows any container members and guest users with edit permissions to share files. The restrictive sharing model allows only container members who are either Owners or Managers to share files.
### -AnonymousLinkExpirationInDays
Specifies all anonymous links created after the value is set will expire after the set number of days.

PARAMVALUE: $true | $false
The value can be from 1 to 730 days.

To defer to the tenant level setting, set the value to -1.

```yaml
Type: Boolean
Applicable: SharePoint Embedded
Position: Named
Type: Int32
Parameter Sets: (All)
Aliases:

Required: False
Default value: True
Position: Named
Default value: None
Accept pipeline input: False
Accept wildcard characters: False
```

### -ApplicationRedirectUrl

This parameter specifies the url of that the application should be redirected to.
Expand Down Expand Up @@ -146,6 +134,7 @@ Default value: None
Accept pipeline input: False
Accept wildcard characters: False
```

### -CopilotEmbeddedChatHosts
This parameter is used to add host URLs allowed to use the SharePoint Embedded application's declarative agent experience.

Expand All @@ -161,27 +150,26 @@ Accept pipeline input: False
Accept wildcard characters: False
```

### -OverrideTenantWhoCanShareAnonymousAllowList
### -DiscoverabilityDisabled

This setting determines if the container type `WhoCanShareAnonymousAllowList` overrides the tenant-level `WhoCanShareAnonymousAllowList`. The default value for this parameter is false.
As a SharePoint Administrator in Microsoft 365, you can control how your content appears in the Microsoft 365 experience. When this value is true, the SharePoint Embedded application content is hidden throughout the Microsoft 365 environment, including on office.com, onedrive.com, in recommended sections, or through other Microsoft intelligent file discovery features.
If you opt into the Microsoft 365 experience, your files will be integrated into Microsoft 365 environment, participating in intelligent file discovery.

PARAMVALUE: True | False

```yaml
Type: Boolean
Parameter Sets: (All)
Aliases:

Required: False
Applicable: SharePoint Embedded
Position: Named
Default value: None
Required: False
Default value: True
Accept pipeline input: False
Accept wildcard characters: False
```

### -OverrideTenantWhoCanShareAuthenticatedGuestAllowList
### -OverrideTenantWhoCanShareAnonymousAllowList

This setting determines if the container type `WhoCanShareAuthenticatedGuestAllowList` overrides the tenant-level `WhoCanShareAuthenticatedGuestAllowList`. The default value for this parameter is false.
This setting determines if the container type `WhoCanShareAnonymousAllowList` overrides the tenant-level `WhoCanShareAnonymousAllowList`.

PARAMVALUE: True | False

Expand All @@ -192,56 +180,46 @@ Aliases:

Required: False
Position: Named
Default value: None
Default value: False
Accept pipeline input: False
Accept wildcard characters: False
```

### -WhoCanShareAnonymousAllowList

Sets a container type-specific list of security groups who are allowed to share with anonymous (non-authenticated) users as well as authenticated guest users. This must be set in conjunction with `OverrideTenantWhoCanShareAnonymousAllowList`.
### -OverrideTenantWhoCanShareAuthenticatedGuestAllowList

> [!NOTE]
> This allow list only accepts security groups, and not Microsoft 365 Groups.
This setting determines if the container type `WhoCanShareAuthenticatedGuestAllowList` overrides the tenant-level `WhoCanShareAuthenticatedGuestAllowList`.

Each security group is denoted by its GUID object ID. To set this list to be a specific security group, you need to enter its GUID as the parameter. You can enter multiple GUIDs by using a comma to separate them. To skip the check and allow all security groups to share to anyone, set this allow list and the `WhoCanShareAuthenticatedGuestAllowList` to null arrays.
PARAMVALUE: True | False

```yaml
Type: Guid[]
Type: Boolean
Parameter Sets: (All)
Aliases:

Required: False
Position: Named
Default value: None
Default value: False
Accept pipeline input: False
Accept wildcard characters: False
```

### -WhoCanShareAuthenticatedGuestAllowList

Sets a container type-specific list of security groups who are allowed to share with authenticated guest users at the container level. This must be set in conjunction with `OverrideTenantWhoCanShareAuthenticatedGuestAllowList`.

> [!NOTE]
> This allow list only accepts security groups, and not Microsoft 365 Groups.

Each security group is denoted by its GUID object ID. To set this list to be a specific security group, you need to enter its GUID as the parameter. You can enter multiple GUIDs by using a comma to separate them. To skip the check and allow all security groups to share to authenticated guests, set this allow list to a null array.
### -SharingRestricted

SharePoint Embedded offers a role-based sharing model that allows developers to configure file-sharing permissions based on container permission roles, offering a choice between a restrictive and an open sharing model. The open sharing model allows any container members and guest users with edit permissions to share files. The restrictive sharing model allows only container members who are either Owners or Managers to share files.

PARAMVALUE: True | False

```yaml
Type: Guid[]
Parameter Sets: (All)
Aliases:

Required: False
Type: Boolean
Applicable: SharePoint Embedded
Position: Named
Default value: None
Required: False
Default value: True
Accept pipeline input: False
Accept wildcard characters: False
```


### -WhoCanShareAnonymousAllowList
### -WhoCanShareAnonymousAllowList

Sets a container type-specific list of security groups who are allowed to share with anonymous (non-authenticated) users as well as authenticated guest users. This must be set in conjunction with `OverrideTenantWhoCanShareAnonymousAllowList`.

Expand All @@ -251,18 +229,18 @@ Sets a container type-specific list of security groups who are allowed to share
Each security group is denoted by its GUID object ID. To set this list to be a specific security group, you need to enter its GUID as the parameter. You can enter multiple GUIDs by using a comma to separate them. To skip the check and allow all security groups to share to anyone, set this allow list and the `WhoCanShareAuthenticatedGuestAllowList` to null arrays.

```yaml
Type: Guid[]
Parameter Sets: (All)
Aliases:
Applicable: SharePoint Online
Required: False
Position: Named
Default value: None
Accept pipeline input: False
Accept wildcard characters: False
Type: Guid[]
Parameter Sets: (All)
Aliases:

Required: False
Position: Named
Default value: None
Accept pipeline input: False
Accept wildcard characters: False
```

### WhoCanShareAuthenticatedGuestAllowList
### -WhoCanShareAuthenticatedGuestAllowList

Sets a container type-specific list of security groups who are allowed to share with authenticated guest users at the container level. This must be set in conjunction with `OverrideTenantWhoCanShareAuthenticatedGuestAllowList`.

Expand All @@ -271,45 +249,12 @@ Sets a container type-specific list of security groups who are allowed to share

Each security group is denoted by its GUID object ID. To set this list to be a specific security group, you need to enter its GUID as the parameter. You can enter multiple GUIDs by using a comma to separate them. To skip the check and allow all security groups to share to authenticated guests, set this allow list to a null array.

```yaml
Type: Guid[]
Parameter Sets: (All)
Aliases:
Applicable: SharePoint Online
Required: False
Position: Named
Default value: None
Accept pipeline input: False
Accept wildcard characters: False
```

### OverrideTenantWhoCanShareAnonymousAllowList

This setting determines if the container type `WhoCanShareAnonymousAllowList` overrides the tenant-level `WhoCanShareAnonymousAllowList`. The default value for this parameter is false.

PARAMVALUE: True | False

```yaml
Type: Boolean
Type: Guid[]
Parameter Sets: (All)
Applicable: SharePoint Online
Required: False
Position: Named
Default value: None
Accept pipeline input: False
Accept wildcard characters: False
```

### OverrideTenantWhoCanShareAuthenticatedGuestAllowList

This setting determines if the container type `WhoCanShareAuthenticatedGuestAllowList` overrides the tenant-level `WhoCanShareAuthenticatedGuestAllowList`. The default value for this parameter is false.

PARAMVALUE: True | False
Aliases:

```yaml
Type: Boolean
Parameter Sets: (All)
Applicable: SharePoint Online
Required: False
Position: Named
Default value: None
Expand Down
3 changes: 2 additions & 1 deletion sharepoint/sharepoint-ps/sharepoint-online/Set-SPOTenant.md
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -1354,11 +1354,12 @@ Accept wildcard characters: False

### -FolderAnonymousLinkType

Anonymous access links can allow recipients to only view or view and edit.
Users can configure folder anonymous access links that allow recipients to view, view and upload, or view, edit, and upload files.
Copy link
Contributor

@samkabue samkabue Jun 3, 2025

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

view, view and upload, or view, edit, and upload files.

needs to be updated to include None too?

Copy link
Contributor Author

@hhhults hhhults Jun 3, 2025

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

I just reverted the change. None is the default value for the enum, which was reused from another place, but it doesn't have a good meaning in this context. The docs should not include it as a supported option.


The valid values are:

- View
- ViewUpload
- Edit

```yaml
Expand Down