I have an service mailbox created in entra id and i use it for sending customer notification only, can i block the user acount from loggin in without disabling it?

Question

I have an service mailbox created in entra id and i use it for sending customer notification only, can i block the user acount from loggin in without disabling it?

Answer 1

Well, you really shouldnt be using an active account for this. Convert it to a shared mailbox , disable the account and simply simply send the customer notifications as that mailbox, no need to really authenticate to it

If that is not possible, then you can create a conditional access policy to block access to 365 workloads:

https://learn.microsoft.com/en-us/microsoft-365/admin/add-users/remove-former-employee-step-1?view=o365-worldwide#block-a-former-employees-access-to-microsoft-365-services

or use a conditional access policy to block logon access to all apps or from only trusted IPs etc...