Skip to content

Update descriptions for FilePreviewAllowedDomainList and IsFilePrevie… #1166

New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Merged
Ruchika-mittal01 merged 4 commits into from
May 20, 2026
Merged

Update descriptions for FilePreviewAllowedDomainList and IsFilePrevie… #1166

Changes from all commits
Commits
Show all changes
4 commits
Select commit Hold shift + click to select a range
b0fb07e
Update descriptions for FilePreviewAllowedDomainList and IsFilePrevie…
hildar007 May 15, 2026
6dd7d58
Update descriptions for FilePreviewAllowedDomainList and IsFilePrevie…
hildar007 May 18, 2026
7db0b1c
Update descriptions for FilePreviewAllowedDomainList and IsFilePrevie…
hildar007 May 18, 2026
450db33
typo fixes
Ruchika-mittal01 May 20, 2026
File filter

Filter by extension

Filter by extension
Conversations
Failed to load comments.
Loading
Jump to
Jump to file
Failed to load files.
Loading
Diff view
Diff view
35 changes: 29 additions & 6 deletions sharepoint/sharepoint-ps/Microsoft.Online.SharePoint.PowerShell/Set-SPOTenant.md
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -8,7 +8,7 @@ schema: 2.0.0
author: samkabue
ms.author: speedta
ms.reviewer: Mengke-GH
description: 'A PowerShell cmdlet used in SharePoint Online to configure organization-wide tenant settings. '
description: 'A PowerShell cmdlet used in SharePoint Online to configure organization-wide tenant settings.'
ms.date: 03/04/2026
---

Expand Down Expand Up @@ -276,6 +276,8 @@ Set-SPOTenant [-MinCompatibilityLevel <Int32>] [-MaxCompatibilityLevel <Int32>]
[-RestrictResourceAccountAccess <Boolean>] [-RestrictExternalSharingForAgents <Boolean>]
[-AllowFileArchive <Boolean>] [-AllowFileArchiveByDefault <Boolean>] [<CommonParameters>]
[-EnableNotificationsSubscriptions <Boolean>]
[-IsFilePreviewDomainRestrictionEnabled <Boolean>]
[-FilePreviewAllowedDomainList <String>]
[-DisableTeamsMeetingRecordingDeletedNotification <Boolean>]
```

Expand Down Expand Up @@ -406,6 +408,8 @@ Set-SPOTenant [-MinCompatibilityLevel <Int32>] [-MaxCompatibilityLevel <Int32>]
[-RestrictResourceAccountAccess <Boolean>] [-RestrictExternalSharingForAgents <Boolean>]
[-AllowFileArchive <Boolean>] [-AllowFileArchiveByDefault <Boolean>] [<CommonParameters>]
[-EnableNotificationsSubscriptions <Boolean>]
[-IsFilePreviewDomainRestrictionEnabled <Boolean>]
[-FilePreviewAllowedDomainList <String>]
[-DisableTeamsMeetingRecordingDeletedNotification <Boolean>]
```

Expand Down Expand Up @@ -534,6 +538,8 @@ Set-SPOTenant [-MinCompatibilityLevel <Int32>] [-MaxCompatibilityLevel <Int32>]
[-RestrictResourceAccountAccess <Boolean>] [-RestrictExternalSharingForAgents <Boolean>]
[-AllowFileArchive <Boolean>] [-AllowFileArchiveByDefault <Boolean>] [<CommonParameters>]
[-EnableNotificationsSubscriptions <Boolean>]
[-IsFilePreviewDomainRestrictionEnabled <Boolean>]
[-FilePreviewAllowedDomainList <String>]
[-DisableTeamsMeetingRecordingDeletedNotification <Boolean>]
```

Expand Down Expand Up @@ -663,6 +669,8 @@ Set-SPOTenant [-MinCompatibilityLevel <Int32>] [-MaxCompatibilityLevel <Int32>]
-RestrictExternalSharing <Guid[]> [-AddAppIdToList] [-RemoveAppIdFromList]
[-AllowFileArchive <Boolean>] [-AllowFileArchiveByDefault <Boolean>] [<CommonParameters>]
[-EnableNotificationsSubscriptions <Boolean>]
[-IsFilePreviewDomainRestrictionEnabled <Boolean>]
[-FilePreviewAllowedDomainList <String>]
[-DisableTeamsMeetingRecordingDeletedNotification <Boolean>]
```

Expand Down Expand Up @@ -890,6 +898,14 @@ Set-SPOTenant -IsFilePreviewDomainRestrictionEnabled $true -FilePreviewAllowedDo

This example restricts file preview to the specified domains. When domain restriction is enabled, only files embedded from the listed domains can be previewed, in addition to predefined trusted Microsoft domains (for example, teams.microsoft.com).

### EXAMPLE 27

```powershell
Set-SPOTenant -IsFilePreviewDomainRestrictionEnabled $false
```

This example disables the file preview domain restriction. The previously configured allow list is retained but ignored, so the file preview viewer can load content from any domain.

## PARAMETERS

### -AIBuilderModelScope
Expand Down Expand Up @@ -3553,8 +3569,13 @@ Accept wildcard characters: False

### -FilePreviewAllowedDomainList

Specifies the list of domains that are allowed for file preview.
Use a comma-delimited list of domain names. For example: `contoso.com,fabrikam.com`.
> Applicable: SharePoint Online

Specifies a list of domains that the file preview viewer is allowed to load content from when rendering previews (PDF, images, Office, documents, and other supported file types). Use the comma character as the delimiter for entering multiple values. For example, `"contoso.com,fabrikam.com"`.

When the restriction is disabled, the list is retained but ignored, and the file preview viewer can load content from any domain. When the restriction is enabled, if this parameter is not specified, a predefined set of allowed domains (such as `teams.microsoft.com`) is used. If it is specified, the provided domains are appended to the default set and do not replace it.

Domain entries must be fully qualified domain names (for example, `contoso.com`) and are provided as a comma-separated list. Each entry is trimmed and empty values are ignored. The bare wildcard `*` is not allowed. Wildcards are only permitted in the left-most label as `*.contoso.com`. Invalid wildcard patterns (for example, `contoso.*` or `a*b.com`) are rejected. Duplicate entries are removed using case-sensitive comparison. The list can contain up to 500 domains.

```yaml
Type: String
Expand Down Expand Up @@ -3823,9 +3844,11 @@ Accept wildcard characters: False

### -IsFilePreviewDomainRestrictionEnabled

Enables or disables domain-based restrictions for file preview.
> Applicable: SharePoint Online

Enables or disables enforcement of the file preview domain allow list defined by `FilePreviewAllowedDomainList`.

When set to `$true`, SharePoint restricts file preview to the domains specified in `-FilePreviewAllowedDomainList`. When set to `$false`, domain restrictions are disabled and file preview is allowed for all domains, regardless of the allow list configuration. This setting affects the embedded preview experiences.
The values are `$true` and `$false`. The default value is `$false`, which means the restriction is disabled and the file preview viewer can load content from any domain.

PARAMVALUE: True | False

Expand Down Expand Up @@ -5357,7 +5380,7 @@ Accept wildcard characters: False

> Applicable: SharePoint Online

Sets the sensitiviy label for a site.
Sets the sensitivity label for a site.

```yaml
Type: String
Expand Down