How to create a team with PnP PowerShell

by Dennis · February 5, 2019

Sometimes I like a nice challenge. I came across a Tweet from Joanne Klein with a question about Microsoft Teams provisioning. This article describes how to create a team with PnP PowerShell and the Microsoft Graph.

Update 24/03: I have created a new blog which uses the Create Team method.

The question from Joanne

On the 23rd of january I spotted this Tweet and the first response from Drew Madelung pointed me in the right direction for a solution.

You could call graph to create via PS and use PnP to handle graph connection or use Teams module

— Drew Madelung (@dmadelung) January 24, 2019

My first attempt to create a solution

The following script is the end result of my attempt to recreate the solution suggested by Drew Madelung. I choose to use Microsoft Graph and PnP PowerShell.

Feel free to use it (of course at your own risk ;)).

# Connect with the Microsoft Graph via PnP PowerShell
# https://docs.microsoft.com/en-us/powershell/sharepoint/sharepoint-pnp/sharepoint-pnp-cmdlets?view=sharepoint-ps
Connect-PnPOnline -Scopes "Group.ReadWrite.All"
$accesstoken = Get-PnPAccessToken

# Example of json for POST https://graph.microsoft.com/v1.0/groups
# https://docs.microsoft.com/en-us/graph/api/group-post-groups?view=graph-rest-1.0
$creategroup = @'
{
    "description": "Twitter Test Team",
    "displayName": "Twitter",
    "groupTypes": [
      "Unified"
    ],
    "mailEnabled": true,
    "mailNickname": "twitter",
    "securityEnabled": false
  }
'@
$response = Invoke-RestMethod -Uri https://graph.microsoft.com/v1.0/groups -Body $creategroup -ContentType "application/json" -Headers @{Authorization = "Bearer $accesstoken"} -Method Post

# Example of json for PUT https://graph.microsoft.com/v1.0/groups/{id}/team
# https://docs.microsoft.com/en-us/graph/api/team-put-teams?view=graph-rest-1.0

$groupid = $response.'id'
$createteam = @'
{  
    "memberSettings": {
      "allowCreateUpdateChannels": true
    },
    "messagingSettings": {
      "allowUserEditMessages": true,
      "allowUserDeleteMessages": true
    },
    "funSettings": {
      "allowGiphy": true,
      "giphyContentRating": "strict"
    }
  }
'@

$createteamuri = "https://graph.microsoft.com/v1.0/groups/" + $groupid + "/team"
Invoke-RestMethod -Uri $createteamuri -Body $createteam -ContentType "application/json" -Headers @{Authorization = "Bearer $accesstoken"} -Method PUT

# Connect with the Microsoft Graph via PnP PowerShell

# https://docs.microsoft.com/en-us/powershell/sharepoint/sharepoint-pnp/sharepoint-pnp-cmdlets?view=sharepoint-ps

Connect-PnPOnline -Scopes "Group.ReadWrite.All"

$accesstoken = Get-PnPAccessToken

# Example of json for POST https://graph.microsoft.com/v1.0/groups

# https://docs.microsoft.com/en-us/graph/api/group-post-groups?view=graph-rest-1.0

$creategroup = @'

{

"description": "Twitter Test Team",

"displayName": "Twitter",

"groupTypes": [

"Unified"

"mailEnabled": true,

"mailNickname": "twitter",

"securityEnabled": false

}

$response = Invoke-RestMethod -Uri https://graph.microsoft.com/v1.0/groups -Body $creategroup -ContentType "application/json" -Headers @{Authorization = "Bearer $accesstoken"} -Method Post

# Example of json for PUT https://graph.microsoft.com/v1.0/groups/{id}/team

# https://docs.microsoft.com/en-us/graph/api/team-put-teams?view=graph-rest-1.0

$groupid = $response.'id'

$createteam = @'

{

"memberSettings": {

"allowCreateUpdateChannels": true

"messagingSettings": {

"allowUserEditMessages": true,

"allowUserDeleteMessages": true

"funSettings": {

"allowGiphy": true,

"giphyContentRating": "strict"

}

$createteamuri = "https://graph.microsoft.com/v1.0/groups/" + $groupid + "/team"

Invoke-RestMethod -Uri $createteamuri -Body $createteam -ContentType "application/json" -Headers @{Authorization = "Bearer $accesstoken"} -Method PUT

Breakdown of the solution

Basicly the script has three parts. First of all you need to connect with the Microsoft Graph and get an access token. I am using the latest PnP PowerShell module for this, so make sure you download this module before running the script.

After that you can use a POST request to create an Office 365 Group via the Microsoft Graph. This is the first step in the creation of a Team.

In the second step I am using the Group ID of the reponse to use a PUT request to create a Microsoft Team.

Tags: MicrosoftGraph PnPPowerShell

Paul H says:

March 22, 2019 at 10:51 am

Hi Dennis, great post but unfortunately i’m getting stuck with an “Access token is empty” error when i run the script. the token isn’t empty if i view the variable. Any ideas? Thanks PH
Dennis says:

March 24, 2019 at 4:38 pm

@Paul H, have you tried just connecting and getting the access token? Does that actually work?

So try to run only these two lines:
Connect-PnPOnline -Scopes “Group.ReadWrite.All”
$accesstoken = Get-PnPAccessToken

Btw, which version of PnP PowerShell module are you using?
John says:

May 13, 2019 at 3:03 pm

Hi Dennis.
I ran into the same problem. The issue is that I want to use this in an automated script (called the Scheduler hourly). Therefore I prepared the credentials and passed them via -Credentials to Connect-PnpOnline. But these credentials do no longer take effect when using Connect-PnPOnline with the paramater “-Scopes”. Using “-Scopes” make the web dialog login box popping up.

Trying it the other way round and just leave out “-Scopes” you will not get the $accesstoken using Get-PnpAccessToken. The action just does not work. If you have done a login via the web login box before, your “old” $accesstoken remains the same and you can continue working (for at least the current session).

Any idea how to get a valid “$accesstoken” without user interaction?
Thx in advance and greetings to the Netherlaths via UK 😉
Dennis says:

May 13, 2019 at 4:56 pm

Hi John,

I haven’t tested it myself, but maybe it is an option to register an application in Azure Active Directory, assign the correct Graph API permissions to it and use the -AppID & AppSecret parameters of the Connect-PnPOnline cmdlet instead?
https://docs.microsoft.com/en-us/powershell/module/sharepoint-pnp/connect-pnponline?view=sharepoint-ps
John says:

May 15, 2019 at 12:14 pm

Hi Dennis.
Yes, I tried it that way. Logging in automatically seems to work. I also get an $accesstoken then. But for some reason then creating a Team Fails with http error 400: Invalid request.
I think I set al necessary Rights such as “Group.ReadWriteAll”, but when saving the Application Settings the browser sends back some sort of an ID string and my browser (I tried all 3 different ones) offers to open the app store in order to find the appropiate app which I obviously do not have…
Will continue to try it out. Thx.
John says:

May 15, 2019 at 12:18 pm

Some additional Information: When switching over to use -AppId and -AppSecret and also AADDomain of Course I no longer use -Scopes and -Url
My assumption is that I am just doing the Right steps but without having sufficient Rights. Group.ReadWriteAll seems not to be set, but I do not know how to find out.
John says:

May 16, 2019 at 1:16 pm

*** SOLUTION ***
Hi Dennis.
In your update post you mentioned: That’s the beauty of Office 365, everything improves so fast! Time to write a part two of my blog post…..

To be honest, quick changes like that sometime make things unrelyable. The fetaure to set Access Rights like Group.ReadWrite.All and Users.ReadWrite.All has changed completely. Obviously not all Rights set there correspond to the -Scopes Parameter of the very same Connect-PnPOnline cmdlet. And threfore also the owner of a Group / Team is set differently. While the creator of the Group / Team is the owner by Default you have to add this to the JSON data when using the App Consent (Service). Then everything works as expected. Here is a Sample for a working JSON:

$body = @’
{
“template@odata.bind”: “https://graph.microsoft.com/beta/teamsTemplates(‘standard’)”,
“displayName”: “Dodenhof”,
“description”: “Dodenhof bei Posthausen”,
“owners@odata.bind”: [
“https://graph.microsoft.com/beta/users(’14d4177e-9643-4857-972e-hcddh2322816′)”
]
}
‘@

So this part is important to add:
“owners@odata.bind”: [
“https://graph.microsoft.com/beta/users(’14d4177e-9643-4857-972e-hcddh2322816’)”
]

HTH,
John

Create a template based team with PnP – Expiscornovus

March 24, 2019

[…] Create Team. With this method you are able to create teams with just one request. So compared to my previous post this is easier when you want to create a team from […]

How to create a team with PnP PowerShell

The question from Joanne

My first attempt to create a solution

Breakdown of the solution

You may also like...

8 Responses

Leave a Reply Cancel reply

Colleagues

Unified Communications

How to create a team with PnP PowerShell

The question from Joanne

My first attempt to create a solution

Breakdown of the solution

You may also like...

Create template based teams with PnP

The new code snippet feature in Teams

Mention a channel with Flow

8 Responses

Leave a Reply Cancel reply

Colleagues

Unified Communications