powerplatform_tenant_settings (Resource)

Manages Power Platform Tenant Settings. Power Platform Tenant Settings are configuration options that apply to the entire tenant. They control various aspects of Power Platform features and behaviors, such as security, data protection, licensing, and more. These settings apply to all environments within your tenant. See Tenant Settings Overview for more details.

Example Usage

terraform {
  required_providers {
    powerplatform = {
      source = "microsoft/power-platform"
    }
  }
}

provider "powerplatform" {
  use_cli = true
}

resource "powerplatform_tenant_settings" "settings" {
  walk_me_opt_out                                       = true
  disable_support_tickets_visible_by_all_users          = true
  disable_trial_environment_creation_by_non_admin_users = true
  disable_capacity_allocation_by_environment_admins     = true
  disable_environment_creation_by_non_admin_users       = true
  disable_portals_creation_by_non_admin_users           = true
  disable_newsletter_sendout                            = true
  disable_nps_comments_reachout                         = true
  disable_survey_feedback                               = true

  power_platform = {
    search = {
      disable_docs_search       = true
      disable_community_search  = true
      disable_bing_video_search = true
    }
    teams_integration = {
      share_with_colleagues_user_limit = 10001
    }
    power_apps = {
      disable_share_with_everyone              = true
      enable_guests_to_make                    = true
      disable_members_indicator                = true
      disable_maker_match                      = true
      disable_unused_license_assignment        = true
      disable_create_from_image                = true
      disable_create_from_figma                = true
      disable_connection_sharing_with_everyone = true
    }
    power_automate = {
      disable_copilot           = true
      disable_copilot_with_bing = true
    }
    environments = {
      disable_preferred_data_location_for_teams_environment = true
    }
    governance = {
      disable_admin_digest                                      = true
      disable_developer_environment_creation_by_non_admin_users = true
      enable_default_environment_routing                        = false
      policy = {
        enable_desktop_flow_data_policy_management = true
      }
    }
    licensing = {
      disable_billing_policy_creation_by_non_admin_users    = true
      enable_tenant_capacity_report_for_environment_admins  = true
      storage_capacity_consumption_warning_threshold        = 88
      enable_tenant_licensing_report_for_environment_admins = true
      disable_use_of_unassigned_ai_builder_credits          = true
      apply_auto_claim_to_only_managed_environments         = true
    }
    power_pages = {}
    champions = {
      disable_champions_invitation_reachout    = true
      disable_skills_match_invitation_reachout = true
    }
    intelligence = {
      disable_copilot                   = true
      enable_open_ai_bot_publishing     = true
      disable_copilot_feedback          = true
      disable_copilot_feedback_metadata = true
    }
    model_experimentation = {
      enable_model_data_sharing = true
      disable_data_logging      = true
    }
    catalog_settings = {
      power_catalog_audience_setting = "All"
    }
    user_management_settings = {
      enable_delete_disabled_user_in_all_environments = true
    }
  }
}

Schema

Optional

  • disable_capacity_allocation_by_environment_admins (Boolean) Disable Capacity Allocation By Environment Admins. See Add-on capacity management for more details.
  • disable_environment_creation_by_non_admin_users (Boolean) Disable Environment Creation By Non Admin Users. See Control environment creation for more details.
  • disable_newsletter_sendout (Boolean) Disable Newsletter Sendout
  • disable_nps_comments_reachout (Boolean) Disable NPS Comments Reachout
  • disable_portals_creation_by_non_admin_users (Boolean) Disable Portals Creation By Non Admin Users
  • disable_support_tickets_visible_by_all_users (Boolean) Disable Support Tickets Visible By All Users
  • disable_survey_feedback (Boolean) Disable Survey Feedback
  • disable_trial_environment_creation_by_non_admin_users (Boolean) Disable Trial Environment Creation By Non Admin Users. See Control environment creation for more details.
  • power_platform (Attributes) Power Platform (see below for nested schema)
  • timeouts (Attributes) (see below for nested schema)
  • walk_me_opt_out (Boolean) Walk Me Opt Out

Read-Only

  • id (String) Id of the Power Platform Tenant

Nested Schema for power_platform

Optional:

Nested Schema for power_platform.catalog_settings

Optional:

  • power_catalog_audience_setting (String) Power Catalog Audience Setting

Nested Schema for power_platform.champions

Optional:

  • disable_champions_invitation_reachout (Boolean) Disable Champions Invitation Reachout
  • disable_skills_match_invitation_reachout (Boolean) Disable Skills Match Invitation Reachout

Nested Schema for power_platform.environments

Optional:

  • disable_preferred_data_location_for_teams_environment (Boolean) Disable Preferred Data Location For Teams Environment

Nested Schema for power_platform.governance

Optional:

  • disable_admin_digest (Boolean) Disable Admin Digest
  • disable_developer_environment_creation_by_non_admin_users (Boolean) Disable Developer Environment Creation By Non Admin Users
  • enable_default_environment_routing (Boolean) Enable Default Environment Routing
  • environment_routing_all_makers (Boolean) Select who can be routed to a new personal developer environment. (All Makers = true, New Makers = false)
  • environment_routing_target_environment_group_id (String) Assign newly created personal developer environments to a specific environment group
  • environment_routing_target_security_group_id (String) Restrict routing to members of the following security group. (00000000-0000-0000-0000-000000000000 allows all users)
  • policy (Attributes) Policy (see below for nested schema)

Nested Schema for power_platform.governance.policy

Optional:

  • enable_desktop_flow_data_policy_management (Boolean) Enable Desktop Flow Data Policy Management

Nested Schema for power_platform.intelligence

Optional:

  • disable_copilot (Boolean) Disable Copilot
  • enable_open_ai_bot_publishing (Boolean) Enable Open AI Bot Publishing

Nested Schema for power_platform.licensing

Optional:

  • disable_billing_policy_creation_by_non_admin_users (Boolean) Disable Billing Policy Creation By Non Admin Users
  • disable_use_of_unassigned_ai_builder_credits (Boolean) Disable Use Of Unassigned AI Builder Credits
  • enable_tenant_capacity_report_for_environment_admins (Boolean) Enable Tenant Capacity Report For Environment Admins
  • enable_tenant_licensing_report_for_environment_admins (Boolean) Enable Tenant Licensing Report For Environment Admins
  • storage_capacity_consumption_warning_threshold (Number) Storage Capacity Consumption Warning Threshold

Nested Schema for power_platform.model_experimentation

Optional:

  • disable_data_logging (Boolean) Disable Data Logging
  • enable_model_data_sharing (Boolean) Enable Model Data Sharing

Nested Schema for power_platform.power_apps

Optional:

  • disable_connection_sharing_with_everyone (Boolean) Disable Connection Sharing With Everyone
  • disable_create_from_figma (Boolean) Disable Create From Figma
  • disable_create_from_image (Boolean) Disable Create From Image
  • disable_maker_match (Boolean) Disable Maker Match
  • disable_share_with_everyone (Boolean) Disable Share With Everyone
  • disable_unused_license_assignment (Boolean) Disable Unused License Assignment
  • enable_guests_to_make (Boolean) Enable Guests To Make

Nested Schema for power_platform.power_automate

Optional:

  • disable_copilot (Boolean) Disable Copilot

Nested Schema for power_platform.power_pages

Nested Schema for power_platform.search

Optional:

  • disable_bing_video_search (Boolean) Disable Bing Video Search
  • disable_community_search (Boolean) Disable Community Search
  • disable_docs_search (Boolean) Disable Docs Search

Nested Schema for power_platform.teams_integration

Optional:

  • share_with_colleagues_user_limit (Number) Share With Colleagues User Limit

Nested Schema for power_platform.user_management_settings

Optional:

  • enable_delete_disabled_user_in_all_environments (Boolean) Enable Delete Disabled User In All Environments

Nested Schema for timeouts

Optional:

  • create (String) A string that can be parsed as a duration consisting of numbers and unit suffixes, such as "30s" or "2h45m". Valid time units are "s" (seconds), "m" (minutes), "h" (hours).
  • delete (String) A string that can be parsed as a duration consisting of numbers and unit suffixes, such as "30s" or "2h45m". Valid time units are "s" (seconds), "m" (minutes), "h" (hours). Setting a timeout for a Delete operation is only applicable if changes are saved into state before the destroy operation occurs.
  • read (String) A string that can be parsed as a duration consisting of numbers and unit suffixes, such as "30s" or "2h45m". Valid time units are "s" (seconds), "m" (minutes), "h" (hours). Read operations occur during any refresh or planning operation when refresh is enabled.
  • update (String) A string that can be parsed as a duration consisting of numbers and unit suffixes, such as "30s" or "2h45m". Valid time units are "s" (seconds), "m" (minutes), "h" (hours).