1 min read

Security-Enable a Microsoft 365 Group

We can set the securityEnabled property to true using scripts or, Microsoft Graph. The instructions below describe the easiest way to do so.

A Microsoft 365 Group can be an easy way to allow some end users to control who access to SharePoint or a Team in Microsoft Teams. However, it can't be used (by default) to share a Power App. To do so, we must first set the securityEnabled property of the Group to true.

Get the Microsoft 365 Group ID

  • Open Azure Portal.
  • Go to Entra Groups.
  • Find the Group you want to update and click on it to open the details.
  • Copy the "Object ID" value on the Overview page. It should be formatted like this: 1b248e9f-f78b-4227-989c-c8b01d8689e2.

Update the Microsoft 365 Group Properties

  • Open Microsoft Graph Explorer .
  • Sign into Graph Explorer as an admin.
  • In the Graph Explorer query bar, enter https://graph.microsoft.com/v1.0/groups/{yourgroupid}  where the {yourgroupid} is the ID of your Microsoft 365 Group.
  • Change the GET dropdown to PATCH.
  • In the Request Body, add {"securityEnabled": true}.
  • Click the Request Headers tab.
  • Enter Key = Content-Type and Value = application/json.
  • Click the Modify Permissions tab again.
  • Click the Consent button next to Group.ReadWrite.All. A popup will open. Click Accept.
  • Click the Consent button next to Directory.ReadWrite.All. A popup will open. Click Accept.

Check the Result

  • Change the PATCH dropdown back to GET.
  • Run the query.
  • You should see the details of the Microsoft 365 group and securityEnabled should be set to true.