Forum Discussion
Online Services available even if there are no Licenses issued
I want to have a couple of users which are not able to use any of the Office 365 online services (like Planner, SharePoint, OneDrive). Therefore I created a security group with the members and a standard Office 365 E3 license and only Microsoft Teams as an application. But the user is still able to access all online services.
Thomas_Steibl You can block access for specific users with Azure AD Conditional Access. Regardless of their license status.
- Can you explain that to me a little further?
Currently I don't see a chance to disable all online services besides Teams?! Since I can't select Teams individually?!
Thanks in advance.Thomas_Steibl See attached screenshot. You can select all apps and then make exclusions if you want.
https://docs.microsoft.com/en-us/azure/active-directory/conditional-access/overview
Thomas_Steibl, the last time I checked, access to SharePoint is granted to synced users by default. No licence required. It is that certain functionality of SharePoint is deprecated for licensed users.
What you need is to explicitly block access to SharePoint for users. What has worked for me in the past is1- make sure none of the sites have blanket access (eg access to Everyone, or Everyone except external user)
2- Create a security group with all the users who should have access and grant that group access appropriately
Same goes with ODFB
mrehmat okay thanks!
But why is it also possible to access planner for instance. Why is it even possible to select or deselect this application for users in the licensing process if it's available anyway???
