PIM Manager settings · Settings > Approvals & policy
Refuse to create a group that has no owner
| Key | RequireGroupOwners |
|---|---|
| Where | Settings > Approvals & policy > Groups |
| Type | On / off |
| Default | Off |
What it does
When the engine creates a group in Microsoft Entra ID it looks for an owner: the owners or sponsor on the group's definition, or the contact of its department. This switch decides what happens when none of them resolves to a person.
When enabled
When on: the engine does not create the group and reports the failure on Jobs, naming the group. The group is created on a later run once an owner is set.
When disabled
When off (the default): the group is created without an owner and the run says so in a warning every time. An owner set later is attached by a later run without touching the group.
Risk and how to reverse it
On: a definition without an owner blocks its group, and everything that depends on the group, until someone fills the owner in -- on an estate where many definitions have no owner, most new groups will not be created. Off: groups can exist that nobody is responsible for. Reversible: switch it back; groups already created are not changed.
Requires
SuperAdmin to change it. The engine reads it at its next run.
Recommended
Off until your group definitions carry owners. Switch it on when you want every new group to have a responsible person from the start.
Documented for PIM Manager 3.0.70. Written by the PIM Manager team; Invardia publishes it. · All settings · Security review pack