Block a user from deleting tasks not created by themselves
Tenant admins can block a specific user from deleting tasks in Microsoft Planner that they didn't create.
Prerequisites for making Planner changes in Windows PowerShell
Follow the steps in Prerequisites for making Planner changes in Windows PowerShell to make Planner changes in Windows PowerShell.
Block a user from deleting tasks they didn't create
Use the Set-PlannerUserPolicy cmdlet to block a user from deleting Planner tasks that they didn't create.
Set-PlannerUserPolicy -UserAadIdOrPrincipalName <user's AADId or UPN> -BlockDeleteTasksNotCreatedBySelf $true
Parameter Description UserAadIdOrPrincipalName Use either the Microsoft Entra ID or the UPN of the user for which you want to export content. BlockDeleteTasksNotCreatedBySelf Whether or not to block the user from deleting tasks not created by themselves. HostName You only need to use this parameter if you access Planner through a host name other than task.</span>office.</span>com
. For example, if you access Planner throughtasks.</span>office365.</span>us
, include-HostName tasks.</span>office365</span>.us
in your command.The following cmdlet will block a user from deleting tasks in Planner that they didn't create.
Set-PlannerUserPolicy -UserAadIdOrPrincipalName amyg@contoso.onmicrosoft.com -BlockDeleteTasksNotCreatedBySelf $true
When you're prompted to authenticate, sign in as yourself (the global admin), not the user you want to unblock.
Unblock a user from deleting tasks they didn't create
Use the Set-PlannerUserPolicy cmdlet to unblock a user from deleting Planner tasks that they didn't create.
Set-PlannerUserPolicy -UserAadIdOrPrincipalName "<User's AAD ID or UPN>" -BlockDeleteTasksNotCreatedBySelf $false
Parameter Description UserAadIdOrPrincipalName Use either the Microsoft Entra ID or the UPN of the user for which you want to export content. BlockDeleteTasksNotCreatedBySelf Whether or not to block the user from deleting tasks not created by themselves. HostName You only need to use this parameter if you access Planner through a host name other than task.</span>office.</span>com
. For example, if you access Planner throughtasks.</span>office365.</span>us
, include-HostName tasks.</span>office365</span>.us
in your command.For example, the following cmdlet will block a user from deleting tasks in Planner that they didn't create.
Set-PlannerUserPolicy -UserAadIdOrPrincipalName amyg@contoso.onmicrosoft.com -BlockDeleteTasksNotCreatedBySelf $false
When you're prompted to authenticate, sign in as yourself (the global admin), not the user you want to unblock.
Get a user's current policy
Check a user's current policy with the Get-PlannerUserPolicy cmdlet.
Get-PlannerUserPolicy -UserAadIdOrPrincipalName "<User's AAD ID or UPN>"
Parameter Description UserAadIdOrPrincipalName Use either the Microsoft Entra ID or the UPN of the user for which you want to export content. HostName You only need to use this parameter if you access Planner through a host name other than task.</span>office.</span>com
. For example, if you access Planner throughtasks.</span>office365.</span>us
, include-HostName tasks.</span>office365</span>.us
in your command.For example, the following cmdlet will get a user's current policy
Get-PlannerUserPolicy -UserAadIdOrPrincipalName amyg@contoso.onmicrosoft.com | fl @odata.context : https://tasks.office.com/taskApi/tenantAdminSettings/$metadata#UserPolicy/$entity id : amyg@contoso.onmicrosoft.com blockDeleteTasksNotCreatedBySelf : False
When you're prompted to authenticate, sign in as yourself (the global admin).