How can setup Conditional Access for Microsoft Team and Sharepoint

Question

Hi,

Current status and license:

AAD P2, O365 E1, EMS E3

We have a plan to deploy condition access to the O365 app for a hybrid working model. We need setup conditional access rule following the requirements below:

• Allow users can access MS Team from Internet (any device including managed or unmanaged devices)
• Block access to Sharepoint if Devices are non-compliance (Intune)
• Block access to O365 Exchange online if Devices are non-compliance (Intune)
• Allow access to Sharepoint if the request comes from a TRUSTED Location

Regard Conditional Access (CA) Policy enforcement from this link Policy enforcement (Picture below)

In my case, I understand that if I configure CA to block access to Sharepoint online when devices are not compliant, unmanaged, or in a Trusted Location, I will be unable to access the Microsoft team. Is that right?

My question is:

How can I open access to MS Team from anywhere and block access to Sharepoint files when they do not meet CA rules above?

Answer 1

Dear Tất ĐạtPhạm,

Thanks for posting in Microsoft community.

We'd love to help, considering we mainly focus on general and build-in queries in SharePoint and Teams, we may have limited resource about Azure Conditional Access.

At the same time, considering we have a dedicated channel azure-active-directory - Microsoft Q&A, for you to be assisted properly, we sincerely recommend you go to that community and post a new thread, members and engineers over there are proficient in the knowledge of Azure Conditional Access queries. They will focus on the specific situation on your side and share specific suggestions. We are sure that our experts from that team can address your query effectively and accurately.

Thanks for your understanding and cooperation! Hope you keep safe and healthy always.

Sincerely,

Sean | Microsoft Community Moderator

Answer 2

Thank you, I will post my question to correct Channel