Prevent students from adding teachers to Office 365 groups/Teams?

[Sonic3]

Hi. Google is not being very helpful with this one and I thought it would be simple! Does anyone know if there's a way to prevent students in Office 365 from adding teachers to Office 365 groups/Teams that the students have created? Surely we can apply a policy that allows them to add/invite other students but not teachers/staff?

 

Alternatively, what is the best/easiest way to stop students from creating Office 365 groups and Teams? (we'd rather not resort to this).

[glen_j]

We've blocked all group creation for all users except admins. https://docs.microsoft.com/en-us/microsoft-365/solutions/manage-creation-of-groups?view=o365-worldwide and groups / teams that are needed have to be requested. If they are not an owner of the team they can't add anyone.

[psydii]

...also I have found it extremely helpful that students can add teachers. The chat gets a bit out of order, and a student brings in a teacher... the matter is dealt with. If it wasn't that easy many misdemeanour's (or worse) might go unreported/dealt with.

 

That said, not even teachers can create Teams here - that way chaos lies. **stares at 3000 Teams created before we blocked that capability**

 

Related but not immediately relevant: https://docs.microsoft.com/en-us/microsoftteams/supervise-chats-edu#:~:text=%20Supervised%20chats%20in%20Microsoft%20Teams%20%201,will%20be...%204%20Related%20topics.%20%20More%20

[2097]

I block everyone creating groups . But have a script that allows certain users to create based on an AD group

[chazzy2501]

we disabled chat and group creation for pupil profile.

[chaplic]

Only way I can think is to completely separate the two directories with information barriers but that causes more problems that it solves

 

You could have a power flow with a webhook into the security log that detects when someone is added to a group, looks at the person who added then, then removes as required. Which is fairly complex and might create more trouble than it's worth by notifications of being adding and removed.

 

Perhaps a similar approach would be to get a report from the Azure AD log of who added who to a group and share with a teacher and let them tackle it retrospectively. You cannot configure out bad behaviour and surely there are some reasonable use cases.

[Boredguy]

Simple solution is to prevent students from creating groups as the link in an earlier post outlines.

 

Out of the 5 tenancies in our MAT, only 1 allows staff to create teams or groups, all the rest are restricted to the IT Support team to prevent loads of 2 user "groups" setup as staff play with things