Forum Discussion

Rk10's avatar
Rk10
Copper Contributor
Jun 16, 2026

Best approach for contractor block policy

Hello there I need some assistance with your best approach for vendor block policy. I am thinking to create one policy with three rules  Block all vendors with the block AD group Vendors to allow ...
Rk10's avatar
Rk10
Copper Contributor
Jun 26, 2026

cder​ thanks for your response I should be more specific in my original question 

Business Requirement

I want a contractor external sharing control policy in Purview with three sharing rules in policy or can be one rule 

Contractor Type

Behaviour

ExternalOnly

Can share externally to any domain

WhitelistOnly

Can share only to approved domains (e.g. gmail.com, yahoo.com)

BlockAll

Cannot share externally at all

 

  • BlockAll = Base AD group for all contractors by default
  • WhitelistOnly = Exception AD group 
  • ExternalOnly = Exception AD group

So any contractor or vendor joins will be added to BlockAll group. And then if that vendor wants to send  to approved domains he will be added to whitelisted domains AD group and if the vendor wants to send outside that whitelisted domains he will be added to ExternalyOnly group. 

please note we need to have that Block rule for all contractors. So I want able to remove block rule at all even they want to send to whitelisted domain they will end up with block default rule + whitelisted rule 

similar if they want to send external, the AD still have Block rule + external only