From b0fb07e006649fa636df676c031a6b95dd95dc3c Mon Sep 17 00:00:00 2001 From: hildar007 <98509254+hildar007@users.noreply.github.com> Date: Fri, 15 May 2026 15:12:39 -0700 Subject: [PATCH 1/4] Update descriptions for FilePreviewAllowedDomainList and IsFilePreviewDomainRestrictionEnabled Update descriptions for FilePreviewAllowedDomainList and IsFilePreviewDomainRestrictionEnabled, change delimiter, add restrictions --- .../Set-SPOTenant.md | 33 ++++++++++++++++--- 1 file changed, 28 insertions(+), 5 deletions(-) diff --git a/sharepoint/sharepoint-ps/Microsoft.Online.SharePoint.PowerShell/Set-SPOTenant.md b/sharepoint/sharepoint-ps/Microsoft.Online.SharePoint.PowerShell/Set-SPOTenant.md index c5e5621f8..c54d12ae1 100644 --- a/sharepoint/sharepoint-ps/Microsoft.Online.SharePoint.PowerShell/Set-SPOTenant.md +++ b/sharepoint/sharepoint-ps/Microsoft.Online.SharePoint.PowerShell/Set-SPOTenant.md @@ -276,6 +276,8 @@ Set-SPOTenant [-MinCompatibilityLevel ] [-MaxCompatibilityLevel ] [-RestrictResourceAccountAccess ] [-RestrictExternalSharingForAgents ] [-AllowFileArchive ] [-AllowFileArchiveByDefault ] [] [-EnableNotificationsSubscriptions ] + [-IsFilePreviewDomainRestrictionEnabled ] + [-FilePreviewAllowedDomainList ] [-DisableTeamsMeetingRecordingDeletedNotification ] ``` @@ -406,6 +408,8 @@ Set-SPOTenant [-MinCompatibilityLevel ] [-MaxCompatibilityLevel ] [-RestrictResourceAccountAccess ] [-RestrictExternalSharingForAgents ] [-AllowFileArchive ] [-AllowFileArchiveByDefault ] [] [-EnableNotificationsSubscriptions ] + [-IsFilePreviewDomainRestrictionEnabled ] + [-FilePreviewAllowedDomainList ] [-DisableTeamsMeetingRecordingDeletedNotification ] ``` @@ -534,6 +538,8 @@ Set-SPOTenant [-MinCompatibilityLevel ] [-MaxCompatibilityLevel ] [-RestrictResourceAccountAccess ] [-RestrictExternalSharingForAgents ] [-AllowFileArchive ] [-AllowFileArchiveByDefault ] [] [-EnableNotificationsSubscriptions ] + [-IsFilePreviewDomainRestrictionEnabled ] + [-FilePreviewAllowedDomainList ] [-DisableTeamsMeetingRecordingDeletedNotification ] ``` @@ -663,6 +669,8 @@ Set-SPOTenant [-MinCompatibilityLevel ] [-MaxCompatibilityLevel ] -RestrictExternalSharing [-AddAppIdToList] [-RemoveAppIdFromList] [-AllowFileArchive ] [-AllowFileArchiveByDefault ] [] [-EnableNotificationsSubscriptions ] + [-IsFilePreviewDomainRestrictionEnabled ] + [-FilePreviewAllowedDomainList ] [-DisableTeamsMeetingRecordingDeletedNotification ] ``` @@ -885,11 +893,19 @@ This example removes any specific version history limit override set for video a ### EXAMPLE 26 ```powershell -Set-SPOTenant -IsFilePreviewDomainRestrictionEnabled $true -FilePreviewAllowedDomainList "contoso.com,fabrikam.com" +Set-SPOTenant -IsFilePreviewDomainRestrictionEnabled $true -FilePreviewAllowedDomainList "contoso.com fabrikam.com" ``` This example restricts file preview to the specified domains. When domain restriction is enabled, only files embedded from the listed domains can be previewed, in addition to predefined trusted Microsoft domains (for example, teams.microsoft.com). +### EXAMPLE 27 + +```powershell +Set-SPOTenant -IsFilePreviewDomainRestrictionEnabled $false +``` + +This example disables the file preview domain restriction. The previously configured allow list is retained but ignored, so the file preview viewer can load content from any domain. + ## PARAMETERS ### -AIBuilderModelScope @@ -3553,8 +3569,13 @@ Accept wildcard characters: False ### -FilePreviewAllowedDomainList -Specifies the list of domains that are allowed for file preview. -Use a comma-delimited list of domain names. For example: `contoso.com,fabrikam.com`. +> Applicable: SharePoint Online + +Specifies a list of domains that the file preview viewer is allowed to load content from when rendering previews (PDF, images, Office, documents, and other supported file types). Use the space character as the delimiter for entering multiple values. For example, `"contoso.com fabrikam.com"`. + +When the restriction is disabled, the list is retained but ignored, and the file preview viewer can load content from any domain. When the restriction is enabled, if this parameter is not specified, a predefined set of allowed domains (such as `teams.microsoft.com`) is used. If it is specified, the provided domains are appended to the default set and do not replace it. + +Domain entries must be fully qualified domain names (for example, `contoso.com`) and are provided as a space-separated list. Each entry is trimmed and empty values are ignored. The bare wildcard `*` is not allowed. Wildcards are only permitted in the left-most label as `*.contoso.com`. Invalid wildcard patterns (for example, `contoso.*` or `a*b.com`) are rejected. Duplicate entries are removed using case-sensitive comparison. The list can contain up to 500 domains. ```yaml Type: String @@ -3823,9 +3844,11 @@ Accept wildcard characters: False ### -IsFilePreviewDomainRestrictionEnabled -Enables or disables domain-based restrictions for file preview. +> Applicable: SharePoint Online + +Enables or disables enforcement of the file preview domain allow list defined by `FilePreviewAllowedDomainList`. -When set to `$true`, SharePoint restricts file preview to the domains specified in `-FilePreviewAllowedDomainList`. When set to `$false`, domain restrictions are disabled and file preview is allowed for all domains, regardless of the allow list configuration. This setting affects the embedded preview experiences. +The values are `$true` and `$false`. The default value is `$false`, which means the restriction is disabled and the file preview viewer can load content from any domain. PARAMVALUE: True | False From 6dd7d58e37a842dd5e0ca96046f9bd896fedd524 Mon Sep 17 00:00:00 2001 From: hildar007 <98509254+hildar007@users.noreply.github.com> Date: Mon, 18 May 2026 13:55:43 -0700 Subject: [PATCH 2/4] Update descriptions for FilePreviewAllowedDomainList and IsFilePreviewDomainRestrictionEnabled --- .../Microsoft.Online.SharePoint.PowerShell/Set-SPOTenant.md | 6 +++--- 1 file changed, 3 insertions(+), 3 deletions(-) diff --git a/sharepoint/sharepoint-ps/Microsoft.Online.SharePoint.PowerShell/Set-SPOTenant.md b/sharepoint/sharepoint-ps/Microsoft.Online.SharePoint.PowerShell/Set-SPOTenant.md index c54d12ae1..e48969d47 100644 --- a/sharepoint/sharepoint-ps/Microsoft.Online.SharePoint.PowerShell/Set-SPOTenant.md +++ b/sharepoint/sharepoint-ps/Microsoft.Online.SharePoint.PowerShell/Set-SPOTenant.md @@ -893,7 +893,7 @@ This example removes any specific version history limit override set for video a ### EXAMPLE 26 ```powershell -Set-SPOTenant -IsFilePreviewDomainRestrictionEnabled $true -FilePreviewAllowedDomainList "contoso.com fabrikam.com" +Set-SPOTenant -IsFilePreviewDomainRestrictionEnabled $true -FilePreviewAllowedDomainList "contoso.com,fabrikam.com" ``` This example restricts file preview to the specified domains. When domain restriction is enabled, only files embedded from the listed domains can be previewed, in addition to predefined trusted Microsoft domains (for example, teams.microsoft.com). @@ -3571,11 +3571,11 @@ Accept wildcard characters: False > Applicable: SharePoint Online -Specifies a list of domains that the file preview viewer is allowed to load content from when rendering previews (PDF, images, Office, documents, and other supported file types). Use the space character as the delimiter for entering multiple values. For example, `"contoso.com fabrikam.com"`. +Specifies a list of domains that the file preview viewer is allowed to load content from when rendering previews (PDF, images, Office, documents, and other supported file types). Use the comma character as the delimiter for entering multiple values. For example, `"contoso.com fabrikam.com"`. When the restriction is disabled, the list is retained but ignored, and the file preview viewer can load content from any domain. When the restriction is enabled, if this parameter is not specified, a predefined set of allowed domains (such as `teams.microsoft.com`) is used. If it is specified, the provided domains are appended to the default set and do not replace it. -Domain entries must be fully qualified domain names (for example, `contoso.com`) and are provided as a space-separated list. Each entry is trimmed and empty values are ignored. The bare wildcard `*` is not allowed. Wildcards are only permitted in the left-most label as `*.contoso.com`. Invalid wildcard patterns (for example, `contoso.*` or `a*b.com`) are rejected. Duplicate entries are removed using case-sensitive comparison. The list can contain up to 500 domains. +Domain entries must be fully qualified domain names (for example, `contoso.com`) and are provided as a comma-separated list. Each entry is trimmed and empty values are ignored. The bare wildcard `*` is not allowed. Wildcards are only permitted in the left-most label as `*.contoso.com`. Invalid wildcard patterns (for example, `contoso.*` or `a*b.com`) are rejected. Duplicate entries are removed using case-sensitive comparison. The list can contain up to 500 domains. ```yaml Type: String From 7db0b1ce3e3faf6bd73116a9be6ceef15c342cde Mon Sep 17 00:00:00 2001 From: hildar007 <98509254+hildar007@users.noreply.github.com> Date: Mon, 18 May 2026 13:57:27 -0700 Subject: [PATCH 3/4] Update descriptions for FilePreviewAllowedDomainList and IsFilePreviewDomainRestrictionEnabled Corrected the example format for specifying multiple domains in the FilePreviewAllowedDomainList parameter. --- .../Microsoft.Online.SharePoint.PowerShell/Set-SPOTenant.md | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/sharepoint/sharepoint-ps/Microsoft.Online.SharePoint.PowerShell/Set-SPOTenant.md b/sharepoint/sharepoint-ps/Microsoft.Online.SharePoint.PowerShell/Set-SPOTenant.md index e48969d47..ef279cbce 100644 --- a/sharepoint/sharepoint-ps/Microsoft.Online.SharePoint.PowerShell/Set-SPOTenant.md +++ b/sharepoint/sharepoint-ps/Microsoft.Online.SharePoint.PowerShell/Set-SPOTenant.md @@ -3571,7 +3571,7 @@ Accept wildcard characters: False > Applicable: SharePoint Online -Specifies a list of domains that the file preview viewer is allowed to load content from when rendering previews (PDF, images, Office, documents, and other supported file types). Use the comma character as the delimiter for entering multiple values. For example, `"contoso.com fabrikam.com"`. +Specifies a list of domains that the file preview viewer is allowed to load content from when rendering previews (PDF, images, Office, documents, and other supported file types). Use the comma character as the delimiter for entering multiple values. For example, `"contoso.com,fabrikam.com"`. When the restriction is disabled, the list is retained but ignored, and the file preview viewer can load content from any domain. When the restriction is enabled, if this parameter is not specified, a predefined set of allowed domains (such as `teams.microsoft.com`) is used. If it is specified, the provided domains are appended to the default set and do not replace it. From 450db334f8c2554c7ff5589cfafe528176106e86 Mon Sep 17 00:00:00 2001 From: Ruchika Mittal Date: Thu, 21 May 2026 04:24:32 +0530 Subject: [PATCH 4/4] typo fixes --- .../Microsoft.Online.SharePoint.PowerShell/Set-SPOTenant.md | 4 ++-- 1 file changed, 2 insertions(+), 2 deletions(-) diff --git a/sharepoint/sharepoint-ps/Microsoft.Online.SharePoint.PowerShell/Set-SPOTenant.md b/sharepoint/sharepoint-ps/Microsoft.Online.SharePoint.PowerShell/Set-SPOTenant.md index ef279cbce..50072dd68 100644 --- a/sharepoint/sharepoint-ps/Microsoft.Online.SharePoint.PowerShell/Set-SPOTenant.md +++ b/sharepoint/sharepoint-ps/Microsoft.Online.SharePoint.PowerShell/Set-SPOTenant.md @@ -8,7 +8,7 @@ schema: 2.0.0 author: samkabue ms.author: speedta ms.reviewer: Mengke-GH -description: 'A PowerShell cmdlet used in SharePoint Online to configure organization-wide tenant settings. ' +description: 'A PowerShell cmdlet used in SharePoint Online to configure organization-wide tenant settings.' ms.date: 03/04/2026 --- @@ -5380,7 +5380,7 @@ Accept wildcard characters: False > Applicable: SharePoint Online -Sets the sensitiviy label for a site. +Sets the sensitivity label for a site. ```yaml Type: String