Set-SPOContainer

Module:

Microsoft.Online.SharePoint.PowerShell

Sets or updates one or more property values for a container in SharePoint Embedded.

Syntax

Set-SPOContainer
   [-Identity] <SPOContainerPipeBind>
   [-BlockDownloadPolicy <Boolean>]
   [-ExcludeBlockDownloadPolicyContainerOwners <Boolean>]
   [-ReadOnlyForBlockDownloadPolicy <Boolean>]
   [<CommonParameters>]

Set-SPOContainer
   [-Identity] <SPOContainerPipeBind>
   [-ConditionalAccessPolicy <SPOConditionalAccessPolicyType>]
   [-LimitedAccessFileType <SPOLimitedAccessFileType>]
   [-AllowEditing <Boolean>]
   [-ReadOnlyForUnmanagedDevices <Boolean>]
   [-AuthenticationContextName <String>]
   [<CommonParameters>]

Set-SPOContainer
   [-Identity] <SPOContainerPipeBind>
   [[-SensitivityLabel] <String>]
   [<CommonParameters>]

Set-SPOContainer
   [-Identity] <SPOContainerPipeBind>
   [-RemoveLabel]
   [<CommonParameters>]

Set-SPOContainer
   [-Identity] <SPOContainerPipeBind>
   [-SharingDomainRestrictionMode <SharingDomainRestrictionModes>]
   [-SharingAllowedDomainList <String>]
   [-SharingBlockedDomainList <String>]
   [<CommonParameters>]

Description

For any parameters that are passed in, the Set-SPOContainer cmdlet sets or updates the setting for the active container identified by the parameter Identity. The cmdlet throws an error if the identity of an archived container is provided.

You must be a SharePoint Embedded Administrator to run the cmdlet.

For permissions and the most current information about Windows PowerShell for SharePoint Embedded Containers, see the online documentation at Intro to SharePoint Embedded Containers Management Shell.

Examples

Example 1

Set-SPOContainer -Identity https://contoso.sharepoint.com/contentstorage/CSP_33a63968-abae-49a3-a255-f83d0ab2260a/ -BlockDownloadPolicy $true

Example 1 sets the Block Download policy on the Container mentioned in the Identity parameter.

Example 2

Set-SPOContainer -Identity https://contoso.sharepoint.com/contentstorage/CSP_33a63968-abae-49a3-a255-f83d0ab2260a/ -ConditionalAccessPolicy AllowLimitedAccess

In this example, limited access is provided to content residing in the container.

Example 3

Set-SPOContainer -Identity https://contoso.sharepoint.com/contentstorage/CSP_33a63968-abae-49a3-a255-f83d0ab2260a/ -SensitivityLabel ab310e93-9f19-43f2-bc19-bf3386dc0956

This example sets a sensitivity label on the container.

Example 4

Set-SPOContainer -Identity https://contoso.sharepoint.com/contentstorage/CSP_33a63968-abae-49a3-a255-f83d0ab2260a/ -RemoveLabel

This example removes any previously set sensitivity label on the container.

Parameters

-AllowEditing

Prevents users from editing Office files in the browser and copying and pasting Office file contents out of the browser window.

PARAMVALUE: False | True

Type:	Boolean
Position:	Named
Default value:	None
Required:	False
Accept pipeline input:	False
Accept wildcard characters:	False

-AuthenticationContextName

The conditional access authentication context name.

Type:	String
Position:	Named
Default value:	None
Required:	False
Accept pipeline input:	False
Accept wildcard characters:	False

-BlockDownloadPolicy

As a SharePoint Embedded Administrator, you can block the download of files from SharePoint Embedded containers. This feature does not need Microsoft Entra Conditional Access policies. This feature can be set for individual containers but not at the organization level.

Blocking the download of files allows users to remain productive while addressing the risk of accidental data loss. Users have browser-only access with no ability to download, print, or sync files. They also won't be able to access content through apps, including the Microsoft Office desktop apps. When web access is limited, users will see the following message at the top of containers: "Your organization doesn't allow you to download, print, or sync from this Container. For help contact your IT department." Read the full documentation for advanced capabilities at Block download policy for SharePoint Containers and OneDrive.

PARAMVALUE: $true | $false

Type:	Boolean
Position:	Named
Default value:	False
Required:	False
Accept pipeline input:	False
Accept wildcard characters:	False
Applies to:	SharePoint Embedded

-ConditionalAccessPolicy

Read the Control access from unmanaged devices documentation to understand Conditional Access Policy usage in SharePoint Embedded container.

Possible values:

• AllowFullAccess: Allows full access from desktop apps, mobile apps, and the web.
• AllowLimitedAccess: Allows limited, web-only access.
• BlockAccess: Blocks access.

Type:	SPOConditionalAccessPolicyType
Position:	Named
Default value:	AllowFullAccess
Required:	False
Accept pipeline input:	False
Accept wildcard characters:	False
Applies to:	SharePoint Embedded

-ExcludeBlockDownloadPolicyContainerOwners

Controls if container owners are excluded from block download policy.

PARAMVALUE: False | True

Type:	Boolean
Position:	Named
Default value:	None
Required:	False
Accept pipeline input:	False
Accept wildcard characters:	False

-Identity

Use this parameter to specify the container url.

Type:	String
Position:	Named
Default value:	False
Required:	True
Accept pipeline input:	False
Accept wildcard characters:	False
Applies to:	SharePoint Embedded

-LimitedAccessFileType

The following parameters can be used with -ConditionalAccessPolicy AllowLimitedAccess for both the organization-wide setting and the container-level setting.

OfficeOnlineFilesOnly: Allows users to preview only Office files in the browser. This option increases security but may be a barrier to user productivity.

LimitedAccessFileType WebPreviewableFiles (default): Allows users to preview Office files and other file types (such as PDF files and images) in the browser. Note that the contents of file types other than Office files are handled in the browser. This option optimizes for user productivity but offers less security for files that aren't Office files.

LimitedAccessFileType OtherFiles: Allows users to download files that can't be previewed, such as .zip and .exe. This option offers less security.

Type:	SPOLimitedAccessFileType
Accepted values:	OfficeOnlineFilesOnly, WebPreviewableFiles, OtherFiles
Position:	Named
Default value:	None
Required:	False
Accept pipeline input:	False
Accept wildcard characters:	False

-ReadOnlyForBlockDownloadPolicy

Controls if read-only should be enabled for block download policy.

PARAMVALUE: False | True

Type:	Boolean
Position:	Named
Default value:	None
Required:	False
Accept pipeline input:	False
Accept wildcard characters:	False

-ReadOnlyForUnmanagedDevices

Controls whether unmanaged devices have read-only access.

PARAMVALUE: False | True

Type:	Boolean
Position:	Named
Default value:	None
Required:	False
Accept pipeline input:	False
Accept wildcard characters:	False

-RemoveLabel

This parameter allows you to remove the assigned sensitivity label on a container.

Type:	SwitchParameter
Position:	Named
Default value:	None
Required:	False
Accept pipeline input:	False
Accept wildcard characters:	False

-SensitivityLabel

Specifies the unique identifier (GUID) of the SensitivityLabel.

Type:	String
Position:	Named
Default value:	None
Required:	False
Accept pipeline input:	False
Accept wildcard characters:	False
Applies to:	SharePoint Embedded

-SharingAllowedDomainList

Specifies a list of email domains that are allowed for sharing with the external collaborators. Use the space character as the delimiter for entering multiple values. For example, "contoso.com fabrikam.com".

Type:	String
Position:	Named
Default value:	None
Required:	False
Accept pipeline input:	False
Accept wildcard characters:	False

-SharingBlockedDomainList

Specifies a list of email domains that are blocked or prohibited for sharing with the external collaborators. Use space character as the delimiter for entering multiple values. For example, "contoso.com fabrikam.com".

Type:	String
Position:	Named
Default value:	None
Required:	False
Accept pipeline input:	False
Accept wildcard characters:	False

-SharingDomainRestrictionMode

Specifies the sharing mode for external domains.

Possible values are:

None - Do not restrict sharing by domain AllowList - Sharing is allowed only with external users that have account on domains specified with -SharingAllowedDomainList BlockList - Sharing is allowed with external users in all domains except in domains specified with -SharingBlockedDomainList

Type:	SharingDomainRestrictionModes
Accepted values:	None, AllowList, BlockList
Position:	Named
Default value:	None
Required:	False
Accept pipeline input:	False
Accept wildcard characters:	False

Related Links

• Getting started with SharePoint Online Management Shell
• Set-SPOTenant
• Get-SPOContainer