Question
You work as a Systems Administrator for your company. The company has several departments.
The company has a subscription to Microsoft 365. All users in your company have a Microsoft 365 E3 license.
You have configured a team for each of the departments. Each team includes several guest accounts for external contractors.
A security policy has the following requirements:
- Contractors must not be able to create channels in Microsoft Teams.
- Contractors must not be able to update channels in Microsoft Teams.
You need to implement the security policy.
Which two of the following actions would meet the requirement? Each correct answer presents a complete solution.
- A. Run the Get-AzureADGroup and Set-AzureADGroup PowerShell cmdlets.
- B. Configure the guest permissions for the teams in the Microsoft Teams admin center. Correct
- C. Modify the default meeting policy.
- D. Modify the meeting settings.
- E. Run the Get-Team and Set-Team PowerShell cmdlets. Correct
Explanation
Whether guests can create and update channels is a per-team guest permission. In the Teams admin center you edit each team under Teams > Manage teams and turn off the guest permission to add or edit channels, or you use Get-Team to list the teams and Set-Team -AllowGuestCreateUpdateChannels $false on each. Set-AzureADGroup changes Microsoft 365 group properties, not Teams guest permissions, and meeting policies and meeting settings do not govern channels.
