UsersPermissionToReadOtherUsersEnabled

Question

When UsersPermissionToReadOtherUsersEnabled is set to false are there any side effects ?
for example teams ?

Regards,
Peter

Answer 1

Hi @OOMS Peter

Do you mean you want to make sure if it will affect Microsoft Teams?

This setting is applied company-wide. Set to $False can disable users' ability to use the Azure AD module for Windows PowerShell to access user information for their organization. For more details, you could see it from:

https://learn.microsoft.com/en-us/powershell/module/msonline/set-msolcompanysettings?view=azureadps-1.0

---

If the answer is helpful, please click "Accept Answer" and kindly upvote it. If you have extra questions about this answer, please click "Comment".
Note: Please follow the steps in our documentation to enable e-mail notifications if you want to receive the related email notification for this thread.

---

Answer 2

some applications have to be addapted when you Set to $False
for example a people picker on SharePoint so owners can choose and read B2B guests profiles
this is what we are implementing before we prevent guests from enumerating

Answer 3

This is an old post, but I want to answer it for future readers, given that this property has direct impact on Teams service functionality.

The UsersPermissionToReadOtherUsersEnabled property must be set to TRUE in order to enable your users to be able to add internal or external members to a team in Teams. If set to FALSE, your users will experience this error when attempting to add a member to a team:

"We couldn't add member. We ran into an issue. Please try again later."

A key indicator that this property might be set to FALSE in your tenant is that though members can't be added to teams, they can still be added to M365 groups.

Reference

• Error "We couldn't add member" when adding users to Teams.

Answer 4

#Old Method May or May Not work with Connect-MsolService being deprecated soon.

#You have to install-module MSOnline on both the oldest powershell version

#and the newest powershell version on your server used to make the connection and reboot it.

#Run the powershell command window as administrator and approve yes.

Install-Module MSOnline

Import-Module MSOnline

Connect-MsolService

Set-MsolCompanySettings -UsersPermissionToReadOtherUsersEnabled $true

#New Method/ I didn't try this one, but will probably work as well see the article at the bottom.

Connect-MgGraph -Scopes "Policy.ReadWrite.Authorization"

Update-MgPolicyAuthorizationPolicy -DefaultUserRolePermissions @{ AllowedToReadOtherUsers = $true}

https://learn.microsoft.com/en-us/answers/questions/1312456/how-to-undo-set-msolcompanysettings-userspermissio