Azure AD Control Panel, Global Policy, App permissions

Question

Hi,

We're trying to make a network here, we want to connect computers to the azure environment, I have a few questions about doing so:

1. Can I set it so users can not access the control panel without being admin etc.
2. Can I set a global policy, so I can do stuff like the above, and also restrict further access etc.
3. Can I block, and lock access to certain applications, could I stop users from installing applications? etc.

I'm more looking for what I can lock them out off, such as control panel as we want a fairly locked down network. Thank you.

Answer 1

Hello @[Errrm] Jack , yes you can disallow users from accessing the Azure AD portal, authenticating to Azure AD applications, managing or accessing Azure resources or using on-premise applications and more. For more information visit the following topics:

To control access to the Azure AD portal:

• Restrict member users' default permissions

To control access to Azure AD applications

• Disable user sign-in for an application
• Conditional Access: Target resources

To control access or application availability, including on-premise applications:

• App management capabilities by platform

To control access to Azure resources:

• What is Azure role-based access control (Azure RBAC)?
• What is Azure attribute-based access control (Azure ABAC)?

Let us know if you need additional assistance. If the answer was helpful, please accept it and rate it so that others facing a similar issue can easily find a solution.