Forum Discussion
Outlook iOS - Circumventing App Protection Policies with Add-Ins
Ok, I have a work around for you.
If you go into Exchange Online then go to Permisions then User roles; you should see a default role assignment policy. Edit the policy and disable all of the app roles (see the screenshot).
After you save the policy Outlook Add-ins not added by and Admin are blocked in the mobile clients and OWA. The user experience varies between Android and iOS but I was unable to install add-ins in Outlook on either platform.
Ok, I have a work around for you.
If you go into Exchange Online then go to Permisions then User roles; you should see a default role assignment policy. Edit the policy and disable all of the app roles (see the screenshot).
After you save the policy Outlook Add-ins not added by and Admin are blocked in the mobile clients and OWA. The user experience varies between Android and iOS but I was unable to install add-ins in Outlook on either platform.
That's an excellent way to block add-ins. it would be really good if there is a way to allow only certain approved apps like onenote as add-ins OR hide this option from the apps (outlook) itself would be also good.
Alternatively, if there is a way to create role assignment policy and assign it to a specific group would be an option in my opinion.
Overall, I am happy with this option for the time being.