Commands › Exchange Online

New-UnifiedGroup

Exchange Online ExchangeOnlineManagement New-*

Create Microsoft 365 Groups in your cloud-based organization. To add members, owners, and subscribers to Microsoft 365 Groups, use the Add-UnifiedGroupLinks cmdlet. **Note**: You can't use this cmdlet to create Microsoft 365 Groups if you connect using certificate based authentication (also known as CBA or app-only authentication for unattended scripts) or Azure managed identity. You can use Microsoft Graph instead. For more information, see Create group.

Quick start script

# New-UnifiedGroup — quick start (serv365.ai)
# 1. Connect (app-only shown; interactive: omit the certificate parameters)
Connect-ExchangeOnline -CertificateThumbprint $thumb -AppId $appId -Organization $org

# 2. Capture the current state first — you cannot roll back what you never recorded
$before = Get-UnifiedGroup
$before | Format-List

# 3. Make the change (dry run first)
New-UnifiedGroup -DisplayName <String> -DlIdentity <DistributionGroupIdParameter> -WhatIf
New-UnifiedGroup -DisplayName <String> -DlIdentity <DistributionGroupIdParameter>

# 4. Verify and diff
$after = Get-UnifiedGroup
Compare-Object ($before | Out-String) ($after | Out-String)

Syntax — 4 parameter sets

Identity (Default)

New-UnifiedGroup [-DisplayName <String>]
 [-AccessType <ModernGroupTypeInfo>]
 [-MailboxRegion <String>]
 [-Alias <String>]
 [-AlwaysSubscribeMembersToCalendarEvents]
 [-AutoSubscribeNewMembers]
 [-Classification <String>]
 [-Confirm]
 [-DataEncryptionPolicy <DataEncryptionPolicyIdParameter>]
 [-EmailAddresses <ProxyAddressCollection>]
 [-ExecutingUser <RecipientIdParameter>]
 [-ExoErrorAsWarning]
 [-HiddenGroupMembershipEnabled]
 [-IsMemberAllowedToEditContent <System.Boolean>]
 [-Language <CultureInfo>]
 [-ManagedBy <RecipientIdParameter[]>]
 [-Members <RecipientIdParameter[]>]
 [-Name <String>]
 [-Notes <String>]
 [-Owner <RecipientIdParameter>]
 [-PrimarySmtpAddress <SmtpAddress>]
 [-RequireSenderAuthenticationEnabled <Boolean>]
 [-SensitivityLabelId <Sustem.Guid>]
 [-SuppressWarmupMessage]
 [-WhatIf]
 [<CommonParameters>]

ProvisioningOptions

New-UnifiedGroup [-DisplayName <String>]
 [-AccessType <ModernGroupTypeInfo>]
 [-Alias <String>]
 [-AlwaysSubscribeMembersToCalendarEvents]
 [-AutoSubscribeNewMembers]
 [-Classification <String>]
 [-Confirm]
 [-DataEncryptionPolicy <DataEncryptionPolicyIdParameter>]
 [-EmailAddresses <ProxyAddressCollection>]
 [-ExecutingUser <RecipientIdParameter>]
 [-ExoErrorAsWarning]
 [-HiddenGroupMembershipEnabled]
 [-Language <CultureInfo>]
 [-ManagedBy <RecipientIdParameter[]>]
 [-Members <RecipientIdParameter[]>]
 [-Name <String>]
 [-Notes <String>]
 [-Owner <RecipientIdParameter>]
 [-PrimarySmtpAddress <SmtpAddress>]
 [-RequireSenderAuthenticationEnabled <Boolean>]
 [-SensitivityLabelId <Sustem.Guid>]
 [-SuppressWarmupMessage]
 [-WhatIf]
 [<CommonParameters>]

SegmentationOption

New-UnifiedGroup [-DisplayName <String>]
 [-SubscriptionEnabled]
 [-AccessType <ModernGroupTypeInfo>]
 [-Alias <String>]
 [-AlwaysSubscribeMembersToCalendarEvents]
 [-AutoSubscribeNewMembers]
 [-Classification <String>]
 [-Confirm]
 [-DataEncryptionPolicy <DataEncryptionPolicyIdParameter>]
 [-EmailAddresses <ProxyAddressCollection>]
 [-ExecutingUser <RecipientIdParameter>]
 [-ExoErrorAsWarning]
 [-HiddenGroupMembershipEnabled]
 [-Language <CultureInfo>]
 [-ManagedBy <RecipientIdParameter[]>]
 [-Members <RecipientIdParameter[]>]
 [-Name <String>]
 [-Notes <String>]
 [-Owner <RecipientIdParameter>]
 [-PrimarySmtpAddress <SmtpAddress>]
 [-RequireSenderAuthenticationEnabled <Boolean>]
 [-SensitivityLabelId <Sustem.Guid>]
 [-SuppressWarmupMessage]
 [-WhatIf]
 [<CommonParameters>]

DlMigration

New-UnifiedGroup -DlIdentity <DistributionGroupIdParameter>
 [-ConvertClosedDlToPrivateGroup]
 [-DeleteDlAfterMigration]
 [-Confirm]
 [-ExecutingUser <RecipientIdParameter>]
 [-ManagedBy <RecipientIdParameter[]>]
 [-Members <RecipientIdParameter[]>]
 [-Owner <RecipientIdParameter>]
 [-WhatIf]
 [<CommonParameters>]

Parameters (29)

Parameter	Type	Required	What it controls
-DisplayName	String	yes	The DisplayName parameter specifies the name of the Microsoft 365 Group. The display name is visible in the Exchange admin center, address lists, and Outlook. The maximum length is 64 characters. If the value...
-DlIdentity	DistributionGroupIdParameter	yes	The DlIdentity parameter specifies the distribution group (also known as a distribution list or DL) that you want to migrate to a Microsoft 365 Group. The distribution group must be a universal distribution group...
-AccessType	ModernGroupTypeInfo		The AccessType parameter specifies the privacy type for the Microsoft 365 Group. Valid values are:
-Alias	String		The Alias parameter specifies the Exchange alias (also known as the mail nickname) for the Microsoft 365 Group. This value identifies the recipient as a mail-enabled object, and shouldn't be confused with multiple...
-AlwaysSubscribeMembersToCalendarEvents	SwitchParameter		The AlwaysSubscribeMembersToCalendarEvents switch controls the default subscription settings of new members that are added to the Microsoft 365 Group.
-AutoSubscribeNewMembers	SwitchParameter		The AutoSubscribeNewMembers switch specifies whether to automatically subscribe new members that are added to the Microsoft 365 Group to conversations and calendar events. You don't need to specify a value with this switch.
-Classification	String		This parameter is reserved for internal Microsoft use.
-Confirm	SwitchParameter		The Confirm switch specifies whether to show or hide the confirmation prompt. How this switch affects the cmdlet depends on whether the cmdlet requires confirmation before proceeding.
-ConvertClosedDlToPrivateGroup	SwitchParameter		The ConvertClosedDlToPrivateGroup switch specifies whether to migrate the closed distribution group to a private Microsoft 365 Group. You don't need to specify a value with this switch.
-DataEncryptionPolicy	DataEncryptionPolicyIdParameter		The DataEncryptionPolicy parameter specifies the data encryption policy that's applied to the Microsoft 365 Group. You can use any value that uniquely identifies the policy. For example:
-DeleteDlAfterMigration	SwitchParameter		The DeleteDlAfterMigration switch specifies whether to delete the distribution group after it's migrated to a Microsoft 365 Group. You don't need to specify a value with this switch.
-EmailAddresses	ProxyAddressCollection		The EmailAddresses parameter specifies all email addresses (proxy addresses) for the Microsoft 365 Group, including the primary SMTP address. In cloud-based organizations, the primary SMTP address and other proxy...
-ExecutingUser	RecipientIdParameter		This parameter is reserved for internal Microsoft use.
-ExoErrorAsWarning	SwitchParameter		The ExoErrorAsWarning switch specifies that Exchange Online errors that you encounter while creating the Microsoft 365 Group are treated as warnings, not errors. You don't need to specify a value with this switch.
-HiddenGroupMembershipEnabled	SwitchParameter		The HiddenGroupMembershipEnabled switch specifies whether to hide the members of the Microsoft 365 Group from users who aren't members of the group. You don't need to specify a value with this switch.
-IsMemberAllowedToEditContent	Boolean		{{ Fill IsMemberAllowedToEditContent Description }}
-Language	CultureInfo		The Language parameter specifies the language preference for the Microsoft 365 Group.
-MailboxRegion	String		The MailboxRegion parameter specifies the preferred data location (PDL) for the Microsoft 365 Group in multi-geo environments.
-ManagedBy	RecipientIdParameter[]		This parameter is reserved for internal Microsoft use.
-Members	RecipientIdParameter[]		The Members parameter specifies the recipients (mail-enabled objects) that are members of the Microsoft 365 Group. You can use any value that uniquely identifies the recipient. For example:
-Name	String		This parameter is deprecated and no longer used.
-Notes	String		The Notes parameter specifies the description of the Microsoft 365 Group. If the value contains spaces, enclose the value in quotation marks.
-Owner	RecipientIdParameter		The Owner parameter specifies the for the Microsoft 365 Group. An owner is a group member who has certain privileges, such as the ability to edit group properties.
-PrimarySmtpAddress	SmtpAddress		The PrimarySmtpAddress parameter specifies the primary return email address that's used for the recipient. You can't use the EmailAddresses and PrimarySmtpAddress parameters in the same command.
-RequireSenderAuthenticationEnabled	Boolean		The RequireSenderAuthenticationEnabled parameter specifies whether to accept messages only from authenticated (internal) senders. Valid values are:
-SensitivityLabelId	Guid		The SensitivityLabelId parameter specifies the GUID value of the sensitivity label that's assigned to the Microsoft 365 Group.
-SubscriptionEnabled	SwitchParameter		The SubscriptionEnabled switch specifies whether subscriptions to conversations and calendar events are enabled for the Microsoft 365 Group. You don't need to specify a value with this switch.
-SuppressWarmupMessage	SwitchParameter		This parameter is deprecated and no longer used.
-WhatIf	SwitchParameter		The WhatIf switch shows what the command does without making any changes. You don't need to specify a value with this switch.

Reference facts derived from Microsoft documentation, © Microsoft, licensed CC BY 4.0; restructured with original guidance by serv365.ai.