Enable guest access for a few specific teams
Managing Guest Access to Azure Active Directory with PowerShell AzureADPreview Module
Installing PowerShell AzureADPreview Module
- To install the preview version of the PowerShell AzureADPreview module, use the command:
Install-module AzureADPreview
- If you have the General Availability version of the Azure AD PowerShell module (AzureAD) installed, uninstall it before installing the preview version by running the command:
Uninstall-Module AzureAD
- If you already have a preview version installed, run:
Install-Module AzureADPreview
to ensure you have the latest version.
Blocking Guest Access for a Specific Group
- To block guest access for a specific group, run the provided script in your PowerShell session, replace:
"<GroupName>"
With the name of the group you want to block guest access for.
- The script connects to AzureAD, gets the template for the group unified guest directory setting, creates a copy of the setting, sets
"AllowToAddGuests" to True
Gets the object ID of the group you specified, and creates a new AzureAD object setting with the updated copy of the directory setting and the group object ID.
- The script should look like this:
$GroupName = "<GroupName>"
1. Connect-AzureAD
2. $template = Get-AzureADDirectorySettingTemplate | ? {$_.displayname -eq "group.unified.guest"}
$settingsCopy = $template.CreateDirectorySetting()
$settingsCopy["AllowToAddGuests"]=$True
$groupID= (Get-AzureADGroup -SearchString $GroupName).ObjectId
New-AzureADObjectSetting -TargetType Groups -TargetObjectId $groupID -DirectorySetting $settingsCopy
- To verify that the script was executed correctly, run the second script provided, which should return values :
{class SettingValue { Name: AllowToAddGuests Value: True }}
- The verification script should look like this:
Get-AzureADObjectSetting -TargetObjectId $groupID -TargetType Groups | fl Values
- For more information, check out the Solutions2Share blog: