Commands › Microsoft Teams
Grant-CsTeamsEnhancedEncryptionPolicy
Cmdlet to assign a specific Teams enhanced encryption Policy to a user.
Quick start script
# Grant-CsTeamsEnhancedEncryptionPolicy — quick start (serv365.ai)
# 1. Connect (app-only shown; interactive: omit the certificate parameters)
Connect-MicrosoftTeams -CertificateThumbprint $thumb -ApplicationId $appId -TenantId $tenantId
# 2. Run and inspect
Grant-CsTeamsEnhancedEncryptionPolicy -Group <String> | Format-List
# 3. Export for evidence / drift tracking
Grant-CsTeamsEnhancedEncryptionPolicy | Export-Clixml .\CsTeamsEnhancedEncryptionPolicy-$(Get-Date -Format yyyyMMdd).xmlSyntax — 3 parameter sets
Identity (Default)
Grant-CsTeamsEnhancedEncryptionPolicy [[-Identity] <String>] [-PassThru] [[-PolicyName] <String>][-WhatIf] [-Confirm] [<CommonParameters>]GrantToTenant
Grant-CsTeamsEnhancedEncryptionPolicy [-PassThru] [[-PolicyName] <String>] [-Global] [-WhatIf] [-Confirm] [<CommonParameters>]GrantToGroup
Grant-CsTeamsEnhancedEncryptionPolicy [-PassThru] [[-PolicyName] <String>] -Group <String> [-Rank <Int32>] [-WhatIf] [-Confirm]
[<CommonParameters>]Parameters (8)
| Parameter | Type | Required | What it controls |
|---|---|---|---|
| -Confirm | SwitchParameter | Prompts you for confirmation before running the cmdlet. | |
| -Global | SwitchParameter | Use this switch if you want to grant the specified policy to be the default policy for all users in the tenant. | |
| -Group | String | yes | Specifies the group used for the group policy assignment. |
| -Identity | XdsIdentity | Unique identifier assigned to the Teams enhanced encryption policy. | |
| -PassThru | SwitchParameter | Enables you to pass a user object through the pipeline that represents the user being assigned the policy. By default, the Grant-CsTeamsEnhancedEncryptionPolicy cmdlet does not pass objects through the pipeline. | |
| -PolicyName | String | Specifies the name of the policy to be assigned. The PolicyName is the policy identity minus the policy scope ("tag:"). A policy that has an identity of "Tag:ContosoPartnerTeamsEnhancedEncryptionPolicy" has a... | |
| -Rank | Int32 | The rank of the policy assignment, relative to other group policy assignments for the same policy type. | |
| -WhatIf | SwitchParameter | Shows what would happen if the cmdlet runs. The cmdlet is not run. |
Reference facts derived from Microsoft documentation, © Microsoft, licensed CC BY 4.0; restructured with original guidance by serv365.ai.