I have been testing out the provisioning of team sites using Powershell CSOM calls working against an on premise SharePoint 2013 farm. Creating Team Sites this way is very easy. One of the great advantages I have found is I don't need to RDP to any of the servers on the farm and indeed get "kicked off" if one the other consultants hijacks my admin session!

Now, I want script the following using CSOM or REST

  • Break permission inheritance
  • Remove any SharePoint groups
  • Granting one or more AD groups the desired "Contribute" or "Design" permissions.

I just wondered if this is possible without needing to be logged on to a farm server and running server side PS script.

1 Answer 1


Yes, you can accomplish those items without needing the server object model. You have a few options that are client-side:

  • Use CSOM in a console application (does not involve PowerShell). This link has some examples of how to use CSOM, and links to sample code.
  • Use CSOM from PowerShell. This blog is a great starter.

If you would like help on a particular method, update your answer and I will attempt to do so.

  • Thanks very much I will give the second link a go and report back Aug 17, 2015 at 12:51
  • I have been advised by the MSDN forum that is currently no support for AD groups in PS/CSOM or PnPComandlets ....Which is why I am back on the server. Sep 2, 2015 at 15:48

Your Answer

By clicking “Post Your Answer”, you agree to our terms of service and acknowledge you have read our privacy policy.

Not the answer you're looking for? Browse other questions tagged or ask your own question.