App Permission Policy set to block all Microsoft Apps - Impact on Core apps

shockoMS 276

I'm looking to restrict the apps a user can use within MS teams. We have not yet migrated to app centric management and we are using app permission policies for this currently. Out of the box it seems the Global (Org-wide Default) app permission policies allows all MS apps such as 'Approvals', 'Planner' etc. If I set the global policy as Microsoft -> Block All Apps will this still allow usage of the core apps like OneDrive,Excel etc. ?

1 answer

Robin Sheng-MSFT 2,575 Reputation points Microsoft Vendor

2024-08-20T01:51:09.3366667+00:00

Hi @shockoMS

If you set the global policy to Microsoft -> Block all apps, this will usually block all Microsoft-related apps, including OneDrive and Excel. In this case, all Microsoft apps are blocked unless you explicitly allow certain specific apps in the policy.

Thanks for your understanding and support.

If the answer is helpful, please click "Accept Answer" and kindly upvote it. If you have extra questions about this answer, please click "Comment".

Note: Please follow the steps in our documentation to enable e-mail notifications if you want to receive the related email notification for this thread.
Please sign in to rate this answer.
shockoMS 276 Reputation points

2024-08-20T07:51:17.4733333+00:00

Thanks. You state all Microsoft apps are blocked unless you explicitly allow certain specific apps in the policy. If I set the drop-down for Microsoft apps in the permission policy to Allow Specific apps and Block all others I cannot select OneDrive or Excel in the allowed apps listings.

shockoMS 276 Reputation points

2024-08-20T07:51:27.2133333+00:00

Thanks. You state all Microsoft apps are blocked unless you explicitly allow certain specific apps in the policy. If I set the drop-down for Microsoft apps in the permission policy to Allow Specific apps and Block all others I cannot select OneDrive or Excel in the allowed apps listings.

Robin Sheng-MSFT 2,575 Reputation points Microsoft Vendor

2024-08-21T07:04:18.7833333+00:00

Hi @shockoMS

We apologize for the misunderstanding in the previous explanation. Currently, our organization has moved to an app-centric management function to manage access to apps, and we are temporarily unable to reproduce the situation of using policy creation to control access to apps.

According to our official documentation, you can create an app permission policy to control user access to apps. However, OneDrive or Excel cannot be selected in the list of allowed apps, which means that these are part of Teams and the app permission policy that blocks all Microsoft apps will not take effect on them.

Once again, we apologize for the inconvenience caused by the previous explanation.

Robin Sheng-MSFT 2,575 Reputation points Microsoft Vendor

2024-08-26T02:55:22.64+00:00

Hi @shockoMS

I am checking the status of this case. Please let us know if you would like further assistance.

Meanwhile, if the reply is helpful to you, please try to mark it as an answer to help others who encounter the same issue and read this thread.

Thank you for your understanding and patience!

Robin Sheng-MSFT 2,575 Reputation points Microsoft Vendor

2024-08-28T06:43:45.75+00:00

Hi @shockoMS
If an answer has been helpful, please consider accepting the answer to help increase visibility of this question for other members of the Microsoft Q&A community. If not, please let us know what is still needed in the comments so the question can be answered. Thank you for helping to improve Microsoft Q&A!
Sign in to comment

Use comments to ask for clarification, additional information, or improvements to the question.

Share via

App Permission Policy set to block all Microsoft Apps - Impact on Core apps

1 answer

Your answer