how to block SharePoint access from apps on unmanaged devices without affecting teams

Question

how to block SharePoint access from apps on unmanaged devices without affecting teams. When I select allow limited web-only access then it's blocking teams as well. How to only allow managed devices to sync sharepoint sites and only allow limited web-only access for unmanaged devices without affecting teams. Thanks.

Answer 1

Hello Vijay

Here is the steps you can follow

1. Sign in to the Microsoft 365 Admin Center (admin.microsoft.com).
2. 'Navigate to the "Azure Active Directory" portal.
3. In the left-hand menu, click on "Conditional Access."
4. Create a new Conditional Access policy by clicking on the "+ New policy" button.
5. Give your policy a meaningful name and describe it, if desired.
6. Under the "Users and groups" section, select the targeted user or group who should be affected by this policy.
7. In the "Cloud apps or actions" section, click on the "+ Include" button and choose "Select apps."
8. From the application list, select "SharePoint Online," and any other apps you want to block on unmanaged devices.
9. In the "Conditions" section, add the following conditions:   - Under "Device platforms," select "All platforms."   - Under "Client apps," select "Browser."
10. Under the "Access controls" section, configure the following settings:    - For "Grant," choose "Block access."    - Check the box for "Require approved client app" and select "Yes."
11. Scroll down and click on the "Exclude" tab.
12. Click on the "+ Exclude" button and choose "Select apps."13. In the application list, select "Teams."
13. Save the policy to apply the changes.

Answer 2

As design, Teams has following dependency on OneDrive and SharePoint, only Teams call and chat should work independently.

So, it is not possible to allow managed devices to access SharePoint sites and allow limited web-only access for unmanaged devices without affecting Teams.

When you set only managed devices can access SharePoint sites, then only managed devices can access Teams.

Reference: https://learn.microsoft.com/en-us/entra/identity/conditional-access/service-dependencies

---

If the answer is helpful, please click "Accept Answer" and kindly upvote it. If you have extra questions about this answer, please click "Comment".

Note: Please follow the steps in our documentation to enable e-mail notifications if you want to receive the related email notification for this thread.