How to restrict the access only to Microsoft 365 admin portal and Microsoft Intune admin center

Question

Hi Guys,

How can we fine tune CA policy to allow access to only Cloud Apps Microsoft Admin portal that too Microsoft 365 admin center and Microsoft Intune admin center but not allowing access to any other admin portals like Teams, SharePoint, Entra, Purview compliance, Microsoft 365 Defender, Azure, Exchange?

Our End goal is to provide a group of users to have access to Microsoft 365 admin center and Microsoft Intune admin center ONLY.

Thanks in advance.

Answer 1

@D S Niranjan Babu Vallabhaneni Thanks for posting in our Q&A.

From intune's point of view, there is no method to restrict the access only to Microsoft 365 admin portal and Microsoft Intune admin center. The products you mentioned are currently in the same cloud app collection and can't be selected individually.

https://learn.microsoft.com/en-us/entra/identity/conditional-access/concept-conditional-access-cloud-apps

Thanks for your understanding.

---

If the answer is helpful, please click "Accept Answer" and kindly upvote it. If you have extra questions about this answer, please click "Comment".

Note: Please follow the steps in our documentation to enable e-mail notifications if you want to receive the related email notification for this thread.