# Microsoft 365 Group (and Team) creation should be restricted to approved users

This test checks if Microsoft 365 Group creation is restricted to approved users.

Source: https://maester.dev/docs/tests/MT.1055

<!-- This file is generated by website/scripts/generate-test-docs.mjs. Do not edit manually. -->

<div class="test-byline"><div class="test-byline-avatars"><a class="test-byline-avatar test-byline-avatar--author" href="/contributors/merill" title="Merill Fernando · Original author"><img src="https://github.com/merill.png" alt="Merill Fernando" width="28" height="28" loading="lazy" decoding="async" /></a></div><div class="test-byline-meta"><span class="test-byline-text">Contributed by <a href="/contributors/merill">Merill Fernando</a></span><a class="test-byline-link" href="/contributors">All contributors →</a></div></div>

<p class="test-part">Part of <a href="/docs/tests/maester">Maester</a> · Entra ID · Groups · <a href="/docs/tests">All checks</a></p>

```powershell title="Run this check"
Invoke-Maester -TestId MT.1055
```

## Overview

This test checks if Microsoft 365 Group creation is restricted to approved users.

By default, all users in the tenant can create Microsoft 365 Groups. This can lead to group sprawl, security risks and compliance issues.

Creating groups should be restricted to users who have undergone training and understand the responsibilities of group ownership, governance and compliance requirements.

#### Remediation action

Unfortunately, Microsoft 365 does not provide a user interface to restrict group creation. However, you can restrict group creation to approved users by using PowerShell.

Follow the link below to restrict Microsoft 365 Group creation to approved users:.

#### Related links

- [Manage who can create Microsoft 365 Groups](https://learn.microsoft.com/microsoft-365/solutions/manage-creation-of-groups?view=o365-worldwide)

## Details

<details>
<summary>Every attribute of this check</summary>

| Field | Value |
| --- | --- |
| Test ID | MT.1055 |
| Severity | Low |
| Suite | Maester |
| Product | Entra ID |
| Related products | Teams |
| Feature | Groups |
| Area | Access control |
| Resource type | Tenant |
| User impact | Medium |
| Implementation cost | Low |
| MITRE ATT&CK | None |
| Supports controls | nist-800-53-r5:AC-6, nist-800-53-r5:CM-7 |
| PowerShell test | [Test-MtGroupCreationRestricted](https://github.com/maester365/maester/blob/main/tests/maester/entra/Test.MT.1055.ps1) |
| Services | Graph |

</details>

## Source

- Test: [`tests/maester/entra/Test.MT.1055.ps1`](https://github.com/maester365/maester/blob/main/tests/maester/entra/Test.MT.1055.ps1)
- Documentation: [`tests/maester/entra/Test.MT.1055.md`](https://github.com/maester365/maester/blob/main/tests/maester/entra/Test.MT.1055.md)