Group Setting Error after Consent

Title
Group Setting Error after Consent
URL Name
Group-Setting-Error-after-Consent

Question

ProvisionPoint has just been consented, I have gone into the Admin > Settings > Group Settings to check the configuration and setup Sensitivity/Classification or change the options for Group creation for my tenant.

When I do I see the following error:

Error:Invalid Group provided for GroupCreationAllowedGroupId setting. Settings GroupId:xxxxxxxx-xxxx-xxxx-xxxx-xxxxxxxxxxxx, Provided Group.Id: xxxxxxxx-xxxx-xxxx-xxxx-xxxxxxxxxxxx 

 

Why am I seeing this error & what can I do to resolve it?

Answer

The Graph API is not correctly returning which Group is able to create Microsoft 365 Groups and this is displaying an error in ProvisionPoint. 

The resolution is to allow everyone to create Groups and then use ProvisionPoint to reset these settings. 
  1.  Run the PowerShell Script to find the unified Group settings for your tenant - Configure group settings using PowerShell - Microsoft Entra ID | Microsoft Learn 
    1. Find the GroupCreationAllowedGroupId listed and check this in your EAC/AAD to see the name of the Group
  2. Temporarily allow everyone to create Groups and remove the GroupCreationAllowedGroupId
    1. Ensure $AllowGroupCreation = $True
    2. GroupCreationAllowedGroupId = 
  3. Go to ProvisionPoint Workspaces > Admin > Settings > Group Settings 
  4. Set the option for “Allow Everyone to create Groups” to No,  
  5. Type the Group that was removed in the earlier step. This will set which groups can do this outside of ProvisionPoint. 
An example of a script to make the changes via PowerShell can be found here, you will need to make sure that the modules are installed for this to run successfully
ProvisionPointSECURTIY, COMPLIANCE & GOVERNANCE