Blog Post

Microsoft Entra Blog
4 MIN READ

Upgrade your tenant restrictions to v2

Jeff_Bley's avatar
Jeff_Bley
Icon for Microsoft rankMicrosoft
Mar 21, 2024
In a previous blog in the Data Exfiltration series, we discussed different types of tenant restrictions policy. In this blog, we’ll discuss migrating from tenant restrictions v1 to authentication pla...
Updated Mar 18, 2024
Version 1.0
announcements and product news
Jeff_Bley's avatar
Icon for Microsoft rankMicrosoft
Joined July 31, 2019
View Profile
Microsoft Entra Blog
Stay informed on how to secure access for employees, customers, and non-human identities, from anywhere, to multicloud and on-premises resources, with comprehensive identity and network access solutions powered by AI.
Franck Horowitz's avatar
Franck Horowitz
Copper Contributor
Mar 09, 2025

Documentation states that anonymous access to Teams and Sharepoint can be blocked on the data plane with TrV2 through GSA. 

Testing TrV2 with a browser extension (Modheader) to inject the TrV2 header I found that injecting this header also to "data plane", ie Teams.microsoft.com does block anonymous access to Teams.

I am wondering if this method could be safely used to block anonymous access to specific M365 service until a potential move to GSA.