SPOAccessControlSettings

Parameters

Parameter	Attribute	DataType	Description	Allowed Values
IsSingleInstance	Key	String	Specifies the resource is a single instance, the value must be 'Yes'	Yes
DisplayStartASiteOption	Write	Boolean	Determines whether tenant users see the Start a Site menu option
StartASiteFormUrl	Write	String	Specifies URL of the form to load in the Start a Site dialog. The valid values are: (default) - Blank by default, this will also remove or clear any value that has been set.Full URL - Example: https://contoso.sharepoint.com/path/to/form
IPAddressEnforcement	Write	Boolean	Allows access from network locations that are defined by an administrator.
IPAddressAllowList	Write	String	Configures multiple IP addresses or IP address ranges (IPv4 or IPv6). Use commas to separate multiple IP addresses or IP address ranges.
IPAddressWACTokenLifetime	Write	UInt32	Office webapps TokenLifeTime in minutes
CommentsOnSitePagesDisabled	Write	Boolean	When this feature is set to true, comments on site pages will be disabled
SocialBarOnSitePagesDisabled	Write	Boolean	Disables or enables the Social Bar. It will give users the ability to like a page, see the number of views, likes, and comments on a page, and see the people who have liked a page.
DisallowInfectedFileDownload	Write	Boolean	Prevents the Download button from being displayed on the Virus Found warning page.
ExternalServicesEnabled	Write	Boolean	Enables external services for a tenant. External services are defined as services that are not in the Office 365 datacenters.
EmailAttestationRequired	Write	Boolean	Sets email attestation to required
EmailAttestationReAuthDays	Write	UInt32	Sets email attestation re-auth days
Ensure	Write	String	Only value accepted is 'Present'	Present, Absent
Credential	Write	PSCredential	Credentials of the account to authenticate with.
ApplicationId	Write	String	Id of the Azure Active Directory application to authenticate with.
ApplicationSecret	Write	String	Secret of the Azure Active Directory application to authenticate with.
TenantId	Write	String	Name of the Azure Active Directory tenant used for authentication. Format contoso.onmicrosoft.com
CertificatePassword	Write	PSCredential	Username can be made up to anything but password will be used for certificatePassword
CertificatePath	Write	String	Path to certificate used in service principal usually a PFX file.
CertificateThumbprint	Write	String	Thumbprint of the Azure Active Directory application's authentication certificate to use for authentication.

SPO Access Control Settings

This resource allows users to configure and monitor the access control settings for your SPO tenant sharing settings.

Azure AD Permissions

To authenticate via Azure Active Directory, this resource required the following Application permissions:

• Automate
• SharePoint
  • Sites.FullControl.All
• Export
• SharePoint
  • Sites.FullControl.All

NOTE: All permisions listed above require admin consent.

Examples

Example 1

This example is used to test new resources and showcase the usage of new resources being worked on. It is not meant to use as a production baseline.

Configuration Example
{
    param(
        [Parameter(Mandatory = $true)]
        [PSCredential]
        $credsGlobalAdmin
    )
    Import-DscResource -ModuleName Microsoft365DSC

    node localhost
    {
        SPOAccessControlSettings 'ConfigureAccessControlSettings'
        {
            IsSingleInstance             = "Yes"
            DisplayStartASiteOption      = $false
            StartASiteFormUrl            = "https://contoso.sharepoint.com"
            IPAddressEnforcement         = $false
            IPAddressWACTokenLifetime    = 15
            CommentsOnSitePagesDisabled  = $false
            SocialBarOnSitePagesDisabled = $false
            DisallowInfectedFileDownload = $false
            ExternalServicesEnabled      = $true
            EmailAttestationRequired     = $false
            EmailAttestationReAuthDays   = 30
            Ensure                       = "Present"
            Credential                   = $credsGlobalAdmin
        }
    }
}