Assign policy to groups
With the new admin portal you can only assign messaging policy to individual users. Why is this happening when the previous admin portal let us set different options to for example Faculty, Students etc? It's near impossible to manage per-user Teams settings for several thousand students who come and go. We need to be able to let group membership control these settings in Teams.
Per-Torben Sørensen
shared this idea
61 comments
-
Ben Mottram
commented
In a school it would be very handy indeed (actually with respect to safeguarding - essential) to have policies applied at an AAD group level - managing policies on a per user basis is fundamentally broken (a bit like having to install the Teams app for every user and to have that user be a member of the administrators group.... or relax the exe prevention policy neither of which are going to happen)
Sadly in the current state Teams is unmanageable (safely) in an Educational environment (and probably in a large corporate as well, if you are going to use anythng other than the default Org policy) -
Gil Escamilla
commented
What happens when the message policy assignment is required for a constantly changing user profile (providers, service agents, call center operators)? Administration becomes too complicated!
Assignment through a group (security / dynamic / O365) would make things much easier!
Regards!
-
JJJ
commented
"Bulk policy assignment" is different than assigning a policy to a group. Yes, I can use Powershell to assign all group members a particular policy. But if a user is added to that group later, nothing happens. I have still have to go in and add the new group member to the policy manually. The added administrative and reporting overhead is a productivity drain and creates a potential blind spot for reporting on Teams users' access levels.
-
shabs jaleel
commented
you can edit a policy package to your needs.
Admin -> Teams -> Policy packages -> select policy package -> select policy -> Edit policy -> Save each policy editedYou then can apply it to bulk users via PowerShell commands
Now that we have a list of student users in a csv file as specified below
Please note that you will need access to PowerShell & permission Administrator permission to PowerShell & Admin account.CSV FIle:
Users
user_1@domain.com
user_2@domain.com
user_3@domain.com
user_4@domain.com
user_5@domain.com#Connect to SFB
$userCredential = Get-Credential
$sfbSession = New-CsOnlineSession -Credential $userCredential
Import-PSSession $sfbSession#List Policy Package Names Available on Tenant
Get-CsPolicyPackage#Assign Policy Package (1 user)
Grant-CsUserpolicyPackage -identity user@domain -PackageName Policy_Package_Name#Assign Policy Package (csv file)
$csv = import-csv filename.csv
foreach ($line in $csv){
$Auser = $line.users;
echo $Auser;
Grant-CsUserpolicyPackage -identity $Auser -PackageName Policy_Package_Name; -
shabs jaleel
commented
Thanks @RoVar, your script works well, i have also attached script for some users who may want to apply policy package to their users. please test with one user before applying to all users in csv
thank you
-
RoVar
commented
PowerShell commands to assign any policy to bulk users.
Install Teams : https://www.powershellgallery.com/packages/MicrosoftTeams/1.0.5
Install SkypeOnlineConnector : https://www.microsoft.com/en-us/download/details.aspx?id=39366
Import-Module SkypeOnlineConnector
$cred = Get-Credential
$CSSession = New-CsOnlineSession -Credential $cred
Import-PSSession $CSSession -AllowClobber
Connect-MicrosoftTeamsImport-Csv -Path "<filepath>" | foreach{New-CsBatchPolicyAssignmentOperation -PolicyType TeamsMessagingPolicy -PolicyName "<yourpolicyname>" -OperationName "Update messaging Policy" -user $_.email} - This is for Bulk Users , file should be in .csv format and .csv file should be as below.
email
username1@domain.com
username2@domain.com
-
-
-
username100@domain.comChecks - Get-CsOnlineUser | Format-Table UserPrincipalName, TeamsMessagingPolicy, TeamsMeetingPolicy, TeamsAppPermissionPolicy
Grant-CsTeamsMessagingPolicy -identity "usernameEmailID" -PolicyName <Policyname> - This is for Single user
Get-CsOnlineUser -Filter {Department -eq 'DepartmentName'} | Select UserPrincipalName
Get-CsOnlineUser -Filter {Department -eq 'DepartmentName'} | Grant-CsTeamsMeetingPolicy -PolicyName "<yourpolicyname>"try this, it works.
-
Scott
commented
How is this not a thing yet?
-
GaryS
commented
Issues with creating comma separated student lists that have hyphens separating surnames, so much faff for what should be a simple task assigning Packages to Groups
-
Anonymous
commented
Yet another glaring omission in O365. The current situation seems to expose these on a daily basis whether that be from the user or admin side.
'It's on the roadmap' is in danger of becoming a meme at this point.
As for this request all I wanted to do was apply the policy packages to users based upon their group membership. No feature in the console, so I'll do it via powershell I thought.Oh boy, I should have known better by now.
a) Grant-CsUserPolicyPackage is now limited to a maximum of 20 users.
b)New-CsBatchPolicyPackageAssignmentOperation doesn't support apply policy packages despite what your own online help implies.If you think I sound frustrated you'd be correct.
-
BACSTECH
commented
I discovered about a week ago that there are now Policy Packages available in the Teams Admin Center. After they have been assigned to a user(s) they are editable. Just beware that once a package has been assigned it is now part of the Tenant and cannot be removed. I am looking to see if they may be mass added to groups through PowerShell, right now they can only be added individually up to 20 at a time. I have attached a capture.
-
Dan
commented
This should seriously be the norm. You create an exchange rule, you can assign it to whole tenancy, groups or users via the ADMIN interface. You create any sort of rule or change in any other admin centre and you can usually assign it to multiple users via the ADMIN interface. You create a Teams rule and it only allows you to manage one user at a time via the ADMIN interface.
I'm sure or would like to hope that the Teams admin centre wasn't designed to make one change at a time. Would be nice to have a somewhat user friendly GUI that allows you to mange users on a larger scale.. I have thousands of students to admin across several tenancies. Now I have to debate between getting RSI or blindly following some Powershell guide
-
Anonymous
commented
We need to be able to assign a messaging policy to all students, and I don't know powershell. Please sort out another way, maybe by group
-
BACSTECH
commented
Call and Messaging feature actually should be disabled for the EDUStudent policy from the beginning and allow Admins to assign to special student policy.
-
Anonymous
commented
Ridiculous... this should have been baked in from the get go. It shouldn't have taken a major event like this to get MS moving. MS, you want to rule the world with Teams but you made it extremely difficult to manage it. WTH!
-
Plamen Delev Ivanov
commented
Please implement the oportunity to assign the policy packages to a group, nort only to certain users. We have tounsands of students and teachers we want to asign policyes for Microsoft Teams! We need this oportunity as soon as possible!
-
N TK
commented
Horribe! Need this ASAP
-
Anonymous
commented
Please. Integrate this feature. It makes no fun to administrate hundreds of users at this kind.
-
Ido Yavin
commented
I think that I read in a massage (New Feature: Assign policies to a batch of users or a group / February 25th) that this feature is scheduled to 4. march 2020. I have just checked and could not choose a group to assign the policy to.
I guess Teams team has been very busy (as we all are…) adjusting to the new situation with COVID 19 and all. Perfectly understandable. Patience is a necessity these days. : -) I was excited to read that Teams team thinks this suggestion is important and I hope to see this been possible soon. -
Umair Naseer
commented
Any idea when this Get-CsGroupPolicyAssignment : Access Denied. command will be activate on power-shell as we need to assign the policy to group of students and it is not allowing.
-
Anonymous
commented
an absolute basic requirement - any chance microsoft can do this type of config without the need for powershell
