Two different Office packages group-related on one device

Hi Stefan_Adorjan,

User permissions

Microsoft Intune uses role-based access control (RBAC) to manage user permissions. RBAC allows you to assign roles to users, which define the permissions they have. There are both built-in and custom roles available.

To create, edit, or assign roles, you must have one of the following permissions:

- Global Administrator
- Intune Service Administrator

To assign a role to a user:

- Sign in to the Microsoft Intune admin center.
- Select Users > All users.
- Select the user you want to assign a role to.
- Select Assigned roles > Add assignments.
- In the Directory roles pane, select the roles you want to assign to the user.
- Select Add.
- Office app policies

Intune also provides policies specifically for Microsoft Office apps.
These policies allow you to configure how Office apps are used on managed devices.

To add an Office app policy:

- Sign in to the Microsoft Intune admin center.
- Select Apps > Policies for Office apps > Create.
- Enter a name and description for the policy.
- Select how the policy will be applied and which group the policy will apply to.
- Configure the policies you want to apply.
- Select Create.

Role-based access control (RBAC) with Microsoft Intune | Microsoft Learn

Policies for Office apps - Microsoft Intune | Microsoft Learn

windows - Restrict users from local accounts on Intune devices? - Server Fault