# Office 365 Group Configuration
Configures the provisioning of a Microsoft 365 Group (connected to Teams, Planner, and SharePoint) including site structure, team channels, tabs, and task planning.
Referenced by: Modern site configuration and team collaboration scenarios.
# Overview
Office365GroupCfg defines properties for creating Microsoft 365 Groups connected to SharePoint, Microsoft Teams, and Planner. It combines site configuration with team collaboration features.
Child configurations:
SiteCfg— site structure (referenced viaSiteSet)TeamChannelCfg (list)— team channels and tabsPlannerCfg— task planning and board managementPageCfg (list)— team pages
# Applied when
Microsoft 365 Groups are provisioned when:
- Referenced in a modern site provisioning request or team collaboration scenario
- SharePoint Online only — Microsoft 365 Groups are not supported on SharePoint 2016 or on-premises
- Applied during group creation; the group is created with the associated SharePoint site, Microsoft Team, and Planner board
- All child configurations (site structure, team channels, Planner board) are applied hierarchically during group provisioning
- The associated SharePoint site is created as part of the group and inherits all configured structure from
SiteCfg - Team channels are created immediately; Planner board is set up after the team is created
# Core settings
# Name
Type: string | Default: — | Required: Yes
Unique name for this configuration.
# FormatUrl
Type: string | Default: — | Required: Yes
Server-relative URL pattern. Supports {ClientCode}, {MatterCode}.
# FormatDisplayName
Type: string | Default: — | Required: No
Display name pattern. Supports dynamic variables.
# FormatDescription
Type: string | Default: — | Required: No
Group description pattern. Supports dynamic variables.
# SiteSet
Type: string | Default: — | Required: No
Name of the SiteCfg to apply to the associated SharePoint site.
# Owners
Type: string (list) | Default: — | Required: No
Array of owners (login names).
# Members
Type: string (list) | Default: — | Required: No
Array of members (login names).
# Team configuration
# TeamChannels
Type: TeamChannelCfg (list) | Default: — | Required: No
Array of team channels to create with tabs and moderation settings.
# PlannerSet
Type: string | Default: — | Required: No
Name of the PlannerCfg to apply (Planner board configuration).
# Modern site settings
# Classification
Type: string | Default: — | Required: No
Site classification.
# SensitivityLabel
Type: string | Default: — | Required: No
Sensitivity label ID.
# HubSiteUrl
Type: string | Default: — | Required: No
Hub site URL to associate with.
# Features
# FarmFeatures
Type: Guid (list) | Default: — | Required: No
Farm features to activate.
# DeactivateFarmFeatures
Type: Guid (list) | Default: — | Required: No
Farm features to deactivate.
# SharePoint Online device and access policies
Note: All properties in this section apply only to SharePoint Online. They are ignored on on-premises deployments.
# BlockDownloadPolicy
Type: bool? | Default: — | Required: No
Prevent file downloads for users without managed devices.
# ExcludeBlockDownloadPolicySiteOwners
Type: bool? | Default: — | Required: No
Only applies when BlockDownloadPolicy is true. Exclude group owners from the block download policy.
# ReadOnlyForBlockDownloadPolicy
Type: bool? | Default: — | Required: No
Only applies when BlockDownloadPolicy is true. Enable read-only mode for users affected by the policy.
# ConditionalAccessPolicy
Type: enum? | Default: — | Required: No
Conditional access policy type: AllowFullAccess, AllowLimitedAccess, BlockAccess.
# AuthenticationContextName
Type: string | Default: — | Required: No
Only applies when ConditionalAccessPolicy is AuthenticationContext. Name of the authentication context to enforce.
# LimitedAccessFileType
Type: enum? | Default: — | Required: No
Only applies when ConditionalAccessPolicy is AllowLimitedAccess. Allowed file types: OfficeOnlineFilesOnly, WebPreviewableFiles, OtherFiles.
# AllowEditing
Type: bool? | Default: — | Required: No
Only applies when ConditionalAccessPolicy is AllowLimitedAccess. Allow editing for limited access users.
# ReadOnlyForUnmanagedDevices
Type: bool? | Default: — | Required: No
Only applies when ConditionalAccessPolicy is AllowLimitedAccess. Force read-only mode for unmanaged devices.
# Team settings
Note: Team-specific properties apply only to SharePoint Online Groups connected to Microsoft Teams.
# TeamSettings
Type: TeamSettingsCfg | Default: — | Required: No
Advanced team configuration including fun, guest, member, messaging, and discovery settings.
# TeamSettings.FunSettings
Type: object | Default: — | Required: No
Configure team emoji, memes, and stickers.
# TeamSettings.GuestSettings
Type: object | Default: — | Required: No
Configure guest permissions (messaging, channel creation, etc.).
# TeamSettings.MemberSettings
Type: object | Default: — | Required: No
Configure member permissions (creation, deletion, etc.).
# TeamSettings.MessagingSettings
Type: object | Default: — | Required: No
Configure message retention and deletion policies.
# TeamSettings.DiscoverySettings
Type: object | Default: — | Required: No
Configure team discoverability and directory visibility.
# Related
- Team Channel Configuration — individual team channels
- Planner Configuration — task planning
- Site Configuration — associated SharePoint site