Avoid files download for web-browser users

Hi,

I want like to restrict users (selected users) from being able to download and save files when these are being viewed via web browser.

The use case is that I have a couple of users who need to access MS365 via the browser but on personal laptops. I need to avoid that they are able to download files. Typically they would use the following apps [Outlook, Teams, Sharepoint, Onedrive]

I would like to avoid having to apply restrictions at the application level. Ideally there would be a way to address this for the user license level or so..

Any thoughts?