spo tenant settings set
Sets tenant global settings
Usage
m365 spo tenant settings set [options]
Options
--MinCompatibilityLevel [MinCompatibilityLevel]Specifies the lower bound on the compatibility level for new sites.
--MaxCompatibilityLevel [MaxCompatibilityLevel]Specifies the upper bound on the compatibility level for new sites.
--ExternalServicesEnabled [ExternalServicesEnabled]Enables external services for a tenant. External services are defined as services that are not in the Microsoft 365 data centers. Allowed values
true,false.--NoAccessRedirectUrl [NoAccessRedirectUrl]Specifies the URL of the redirected site for those site collections which have the locked state "NoAccess".
--SharingCapability [SharingCapability]Determines what level of sharing is available for the site. The valid values are: ExternalUserAndGuestSharing (default) - External user sharing (share by email) and guest link sharing are both enabled. Disabled - External user sharing (share by email) and guest link sharing are both disabled. ExternalUserSharingOnly - External user sharing (share by email) is enabled, but guest link sharing is disabled. Allowed values
Disabled,ExternalUserSharingOnly,ExternalUserAndGuestSharing,ExistingExternalUserSharingOnly.--DisplayStartASiteOption [DisplayStartASiteOption]Determines whether tenant users see the Start a Site menu option. Allowed values
true,false.--StartASiteFormUrl [StartASiteFormUrl]Specifies URL of the form to load in the Start a Site dialog. The valid values are: "" (default) - Blank by default, this will also remove or clear any value that has been set. Full URL - Example:"https://contoso.sharepoint.com/path/to/form".
--ShowEveryoneClaim [ShowEveryoneClaim]Enables the administrator to hide the Everyone claim in the People Picker. When users share an item with Everyone, it is accessible to all authenticated users in the tenant's Microsoft Entra ID, including any active external users who have previously accepted invitations. Note, that some SharePoint system resources such as templates and pages are required to be shared with Everyone and this type of sharing does not expose any user data or metadata. Allowed values
true,false.--ShowAllUsersClaim [ShowAllUsersClaim]Enables the administrator to hide the All Users claim groups in People Picker. When users share an item with "All Users (x)", it is accessible to all organization members in the tenant's Microsoft Entra ID who have authenticated via this method. When users share an item with "All Users (x)" it is accessible to all organization members in the tenant that used NTLM to authenticate with SharePoint. Allowed values
true,false.--ShowEveryoneExceptExternalUsersClaim [ShowEveryoneExceptExternalUsersClaim]Enables the administrator to hide the "Everyone except external users" claim in the People Picker. When users share an item with "Everyone except external users", it is accessible to all organization members in the tenant's Microsoft Entra ID, but not to any users who have previously accepted invitations. Allowed values
true,false.--SearchResolveExactEmailOrUPN [SearchResolveExactEmailOrUPN]Removes the search capability from People Picker. Note, recently resolved names will still appear in the list until the browser cache is cleared or expired. SharePoint Administrators will still be able to use starts with or partial name matching when enabled. Allowed values
true,false.--OfficeClientADALDisabled [OfficeClientADALDisabled]When set to true this will disable the ability to use Modern Authentication that leverages ADAL across the tenant. Allowed values
true,false.--LegacyAuthProtocolsEnabled [LegacyAuthProtocolsEnabled]By default, this value is set to true. Setting this parameter prevents Office clients using non-modern authentication protocols from accessing SharePoint Online resources. A value of true - Enables Office clients using non-modern authentication protocols (such as Forms-Based Authentication (FBA) or Identity Client Runtime Library (IDCRL)) to access SharePoint resources. Allowed values
true,false.--RequireAcceptingAccountMatchInvitedAccount [RequireAcceptingAccountMatchInvitedAccount]Ensures that an external user can only accept an external sharing invitation with an account matching the invited email address. Administrators who desire increased control over external collaborators should consider enabling this feature. Allowed values
true,false.--ProvisionSharedWithEveryoneFolder [ProvisionSharedWithEveryoneFolder]Creates a Shared with Everyone folder in every user's new OneDrive for Business document library. The valid values are: True (default) - The Shared with Everyone folder is created. False - No folder is created when the site and OneDrive for Business document library are created. Allowed values
true,false.--SignInAccelerationDomain [SignInAccelerationDomain]Specifies the home realm discovery value to be sent to Microsoft Entra ID during the user sign-in process. When the organization uses a third-party identity provider, this prevents the user from seeing the Microsoft Entra Home Realm Discovery web page and ensures the user only sees their company's Identity Provider's portal. This value can also be used with Microsoft Entra ID Premium to customize the Microsoft Entra ID login page. Acceleration will not occur on-site collections that are shared externally. This value should be configured with the login domain that is used by your company (that is, example@contoso.com). If your company has multiple third-party identity providers, configuring the sign-in acceleration value will break sign-in for your organization. The valid values are: "" (default) - Blank by default, this will also remove or clear any value that has been set. Login Domain - For example: "contoso.com". No value assigned by default.
--EnableGuestSignInAcceleration [EnableGuestSignInAcceleration]Accelerates guest-enabled site collections as well as member-only site collections when the SignInAccelerationDomain parameter is set. Allowed values
true,false.--UsePersistentCookiesForExplorerView [UsePersistentCookiesForExplorerView]Lets SharePoint issue a special cookie that will allow this feature to work even when "Keep Me Signed In" is not selected. "Open with Explorer" requires persisted cookies to operate correctly. When the user does not select "Keep Me Signed in" at the time of sign-in, "Open with Explorer" will fail. This special cookie expires after 30 minutes and cannot be cleared by closing the browser or signing out of SharePoint Online.To clear this cookie, the user must log out of their Windows session. The valid values are: False(default) - No special cookie is generated and the normal Microsoft 365 sign-in length/timing applies. True - Generates a special cookie that will allow "Open with Explorer" to function if the "Keep Me Signed In" box is not checked at sign-in. Allowed values
true,false.--BccExternalSharingInvitations [BccExternalSharingInvitations]When the feature is enabled, all external sharing invitations that are sent will blindly copy the e-mail messages listed in the BccExternalSharingsInvitationList. Allowed values
true,false.--BccExternalSharingInvitationsList [BccExternalSharingInvitationsList]Specifies a list of e-mail addresses to be BCC'd when the BCC for External Sharing feature is enabled. Multiple addresses can be specified by creating a comma-separated list with no spaces.
--UserVoiceForFeedbackEnabled [UserVoiceForFeedbackEnabled]Enables or disables the User Voice Feedback button. Allowed values
true,false.--PublicCdnEnabled [PublicCdnEnabled]Enables or disables the publish CDN. Allowed values
true,false.--PublicCdnAllowedFileTypes [PublicCdnAllowedFileTypes]Sets public CDN-allowed file types.
--RequireAnonymousLinksExpireInDays [RequireAnonymousLinksExpireInDays]Specifies all anonymous links that have been created (or will be created) will expire after the set number of days. To remove the expiration requirement, set the value to zero (0).
--SharingAllowedDomainList [SharingAllowedDomainList]Specifies a list of email domains that are allowed for sharing with external collaborators. Use the space character as the delimiter for entering multiple values. For example, "contoso.com fabrikam.com".
--SharingBlockedDomainList [SharingBlockedDomainList]Specifies a list of email domains that are blocked or prohibited from sharing with external collaborators. Use space character as the delimiter for entering multiple values. For example, "contoso.com fabrikam.com".
--SharingDomainRestrictionMode [SharingDomainRestrictionMode]Specifies the external sharing mode for domains. Allowed values
None,AllowList,BlockList.--OneDriveStorageQuota [OneDriveStorageQuota]Sets a default OneDrive for Business storage quota for the tenant. It will be used for new OneDrive for Business sites created. A typical use will be to reduce the amount of storage associated with OneDrive for Business to a level below what the License entitles the users. For example, it could be used to set the quota to 10 gigabytes (GB) by default.
--OneDriveForGuestsEnabled [OneDriveForGuestsEnabled]Lets OneDrive for Business creation for administrator-managed guest users. Administrator-managed Guest users use credentials in the resource tenant to access the resources. Allowed values
true,false.--IPAddressEnforcement [IPAddressEnforcement]Allows access from network locations that are defined by an administrator. The values are true and false. The default value is false which means the setting is disabled. Before the iPAddressEnforcement parameter is set, make sure you add a valid IPv4 or IPv6 address to the iPAddressAllowList parameter. Allowed values
true,false.--IPAddressAllowList [IPAddressAllowList]Configures multiple IP addresses or IP address ranges (IPv4 or IPv6). Use commas to separate multiple IP addresses or IP address ranges. Verify there are no overlapping IP addresses and ensure IP ranges use Classless Inter-Domain Routing (CIDR) notation. For example,
172.16.0.0, 192.168.1.0/27. No value is assigned by default.--IPAddressWACTokenLifetime [IPAddressWACTokenLifetime]Sets IP Address WAC token lifetime'.
--UseFindPeopleInPeoplePicker [UseFindPeopleInPeoplePicker]Sets use to find people in PeoplePicker to true or false. Note: When set to true, users aren't able to share with security groups or SharePoint groups. Allowed values
true,false.--DefaultSharingLinkType [DefaultSharingLinkType]Let's administrators choose what type of link appears is selected in the “Get a link” sharing dialog box in OneDrive for Business and SharePoint Online. Allowed values
None,Direct,Internal,AnonymousAccess.--ODBMembersCanShare [ODBMembersCanShare]Lets administrators set policy on re-sharing behavior in OneDrive for Business. Allowed values
Unspecified,On,Off.--ODBAccessRequests [ODBAccessRequests]Lets administrators set policy on access requests and requests to share in OneDrive for Business. Allowed values
Unspecified,On,Off.--PreventExternalUsersFromResharing [PreventExternalUsersFromResharing]Prevents external users from resharing. Allowed values
true,false.--ShowPeoplePickerSuggestionsForGuestUsers [ShowPeoplePickerSuggestionsForGuestUsers]Shows people picker suggestions for guest users. Allowed values
true,false.--FileAnonymousLinkType [FileAnonymousLinkType]Sets the file anonymous link type to
None,VieworEdit.--FolderAnonymousLinkType [FolderAnonymousLinkType]Sets the folder anonymous link type to
None,VieworEdit.--NotifyOwnersWhenItemsReshared [NotifyOwnersWhenItemsReshared]When this parameter is set to true and another user re-shares a document from a user's OneDrive for Business, the OneDrive for Business owner is notified by email. For additional information about how to configure notifications for external sharing, see Configure notifications for external sharing for OneDrive for Business. Allowed values
true,false.--NotifyOwnersWhenInvitationsAccepted [NotifyOwnersWhenInvitationsAccepted]When this parameter is set to true and when an external user accepts an invitation to a resource in a user's OneDrive for Business, the OneDrive for Business owner is notified by email. For additional information about how to configure notifications for external sharing, see Configure notifications for external sharing for OneDrive for Business. Allowed values
true,false.--NotificationsInOneDriveForBusinessEnabled [NotificationsInOneDriveForBusinessEnabled]Enables or disables notifications in OneDrive for business. Allowed values
true,false.--NotificationsInSharePointEnabled [NotificationsInSharePointEnabled]Enables or disables notifications in SharePoint. Allowed values
true,false.--OwnerAnonymousNotification [OwnerAnonymousNotification]Enables or disables owner-anonymous notification. Allowed values
true,false.--CommentsOnSitePagesDisabled [CommentsOnSitePagesDisabled]Enables or disables comments on site pages. Allowed values
true,false.--SocialBarOnSitePagesDisabled [SocialBarOnSitePagesDisabled]Enables or disables social bar on site pages. Allowed values
true,false.--OrphanedPersonalSitesRetentionPeriod [OrphanedPersonalSitesRetentionPeriod]Specifies the number of days after a user's Active Directory account is deleted that their OneDrive for Business content will be deleted. The value range is in days, between 30 and 3650. The default value is 30.
--DisallowInfectedFileDownload [DisallowInfectedFileDownload]Prevents the Download button from being displayed on the Virus Found warning page. Allowed values
true,false.--DefaultLinkPermission [DefaultLinkPermission]Choose the default permission that is selected when users share. This applies to anonymous access, internal and direct links. Allowed values
None,View,Edit.--ConditionalAccessPolicy [ConditionalAccessPolicy]Configures conditional access policy. Allowed values
AllowFullAccess,AllowLimitedAccess,BlockAccess.--AllowDownloadingNonWebViewableFiles [AllowDownloadingNonWebViewableFiles]Allows downloading non-web viewable files. The Allowed values
true,false.--AllowEditing [AllowEditing]Allows editing. Allowed values
true,false.--ApplyAppEnforcedRestrictionsToAdHocRecipients [ApplyAppEnforcedRestrictionsToAdHocRecipients]Applies app-enforced restrictions to AdHoc recipients. Allowed values
true,false.--FilePickerExternalImageSearchEnabled [FilePickerExternalImageSearchEnabled]Enables file picker external image search. Allowed values
true,false.--EmailAttestationRequired [EmailAttestationRequired]Sets email attestation to required. Allowed values
true,false.--EmailAttestationReAuthDays [EmailAttestationReAuthDays]Sets email attestation re-auth days.
--HideDefaultThemes [HideDefaultThemes]Defines if the default themes are visible or hidden. Allowed values
true,false.--BlockAccessOnUnmanagedDevices [BlockAccessOnUnmanagedDevices]Blocks access on unmanaged devices. Allowed values
true,false.--AllowLimitedAccessOnUnmanagedDevices [AllowLimitedAccessOnUnmanagedDevices]Allows limited access on unmanaged device blocks. Allowed values
true,false.--BlockDownloadOfAllFilesForGuests [BlockDownloadOfAllFilesForGuests]Blocks download of all files for guests. Allowed values
true,false.--BlockDownloadOfAllFilesOnUnmanagedDevices [BlockDownloadOfAllFilesOnUnmanagedDevices]Blocks download of all files on unmanaged devices. Allowed values
true,false.--BlockDownloadOfViewableFilesForGuests [BlockDownloadOfViewableFilesForGuests]Blocks download of viewable files for guests. Allowed values
true,false.--BlockDownloadOfViewableFilesOnUnmanagedDevices [BlockDownloadOfViewableFilesOnUnmanagedDevices]Blocks download of viewable files on unmanaged devices. Allowed values
true,false.--BlockMacSync [BlockMacSync]Blocks Mac sync. Allowed values
true,false.--DisableReportProblemDialog [DisableReportProblemDialog]Disables report problem dialog. Allowed values
true,false.--DisplayNamesOfFileViewers [DisplayNamesOfFileViewers]Displays names of file viewers. Allowed values
true,false.--EnableMinimumVersionRequirement [EnableMinimumVersionRequirement]Enables minimum version requirement. Allowed values
true,false.--HideSyncButtonOnODB [HideSyncButtonOnODB]Hides the sync button on One Drive for Business. Allowed values
true,false.--IsUnmanagedSyncClientForTenantRestricted [IsUnmanagedSyncClientForTenantRestricted]Is unmanaged sync client for tenant restricted. Allowed values
true,false.--LimitedAccessFileType [LimitedAccessFileType]Allows users to preview only Office files in the browser. This option increases security but may be a barrier to user productivity. Allowed values
OfficeOnlineFilesOnly,WebPreviewableFiles,OtherFiles.--OptOutOfGrooveBlock [OptOutOfGrooveBlock]Opts out of the groove block. Allowed values
true,false.--OptOutOfGrooveSoftBlock [OptOutOfGrooveSoftBlock]Opts out of Groove soft block. Allowed values
true,false.--OrgNewsSiteUrl [OrgNewsSiteUrl]Organization news site url.
--PermissiveBrowserFileHandlingOverride [PermissiveBrowserFileHandlingOverride]Permissive browser file handling override. Allowed values
true,false.--ShowNGSCDialogForSyncOnODB [ShowNGSCDialogForSyncOnODB]Show NGSC dialog for sync on OneDrive for Business. Allowed values
true,false.--SpecialCharactersStateInFileFolderNames [SpecialCharactersStateInFileFolderNames]Sets the special characters state in file and folder names in SharePoint and OneDrive for Business. Allowed values
NoPreference,Allowed,Disallowed.--SyncPrivacyProfileProperties [SyncPrivacyProfileProperties]Syncs privacy profile properties. Allowed values
true,false.--ExcludedFileExtensionsForSyncClient [ExcludedFileExtensionsForSyncClient]Excluded file extensions for sync client. Array of strings split by comma.
--AllowedDomainListForSyncClient [AllowedDomainListForSyncClient]Sets allowed domain list for sync client. Array of GUIDs split by comma. Example:
c9b1909e-901a-0000-2cdb-e91c3f46320a,c9b1909e-901a-0000-2cdb-e91c3f463201.--DisabledWebPartIds [DisabledWebPartIds]Sets disabled web part Ids. Array of GUIDs split by comma. Example:
c9b1909e-901a-0000-2cdb-e91c3f46320a,c9b1909e-901a-0000-2cdb-e91c3f463201.--DisableCustomAppAuthentication [DisableCustomAppAuthentication]Configure if ACS-based app-only auth should be disabled or not. Allowed values
true,false.--CommentsOnListItemsDisabled [CommentsOnListItemsDisabled]Enables or disables comments on lists. Allowed values
true,false.--EnableAzureADB2BIntegration [EnableAzureADB2BIntegration]Enables the preview for OneDrive and SharePoint integration with Microsoft Entra B2B. Allowed values
true,false. Microsoft Entra one-time passcode needs to be enabled for this integration to work. For more information see http://aka.ms/spo-b2b-integration.--SyncAadB2BManagementPolicy [SyncAadB2BManagementPolicy]Syncs Azure B2B Management Policies. Allowed values
true,false. For more information, see SharePoint and OneDrive integration with Microsoft Entra B2B.
-h, --help [help]Output usage information. Optionally, specify which section of command's help you want to see. Allowed values are
options,examples,remarks,response,full. Default isoptions.--query [query]JMESPath query string. See http://jmespath.org/ for more information and examples.
-o, --output [output]Output type.
json,text,csv,md,none. Defaultjson.--verboseRuns command with verbose logging.
--debugRuns command with debug logging.
Remarks
To use this command you have to have permission to access the tenant admin site.
Examples
Sets single tenant global setting.
m365 spo tenant settings set --UserVoiceForFeedbackEnabled true
Sets multiple tenant global settings at once.
m365 spo tenant settings set --UserVoiceForFeedbackEnabled true --HideSyncButtonOnODB true --AllowedDomainListForSyncClient c9b1909e-901a-0000-2cdb-e91c3f46320a,c9b1909e-901a-0000-2cdb-e91c3f463201
Enable Microsoft Entra B2B integration for SharePoint and OneDrive and sync the Microsoft Entra B2B management policies.
m365 spo tenant settings set --EnableAzureADB2BIntegration true
m365 spo tenant settings set --SyncAadB2BManagementPolicy true
Disable Microsoft Entra B2B integration for SharePoint and OneDrive.
m365 spo tenant settings set --EnableAzureADB2BIntegration false
Disable comments on list items for SharePoint and Microsoft Lists.
m365 spo tenant settings set --CommentsOnListItemsDisabled true
## Response
The command won't return a response on success.