Forum Discussion

Iron Contributor

Dec 17, 2019

MDATP Integration - Unsanctioned Apps - Allow for some users?

Hi, I've reviewed the documentation @ https://docs.microsoft.com/en-us/cloud-app-security/governance-discovery in relation to blocking unsanctioned apps - specifically using MDATP on Win10 endpoi...

Cloud App Security

Cloud Discovery

Danny Kadyshevitch

Former Employee

Dec 22, 2019

Hi PJR_CDF KrisDeb Dean_Gross,

The feature for blocking MCAS unsanctioned apps by leveraging MDATP is now in public preview and can be easily enabled in your tenants. In the following docs https://docs.microsoft.com/en-us/cloud-app-security/wdatp-integration, you'll find more details about it. Please contact me directly with any question you might have.

Re scope of control, currently an app will be blocked globally, down the road we will be adding more granular controls, to create a more focused blocking policies.

Thanks,

Danny.

Bill Brennan

Copper Contributor

Jan 02, 2020

Danny Kadyshevitch,

You said "down the road we will be adding more granular controls". Is there a public roadmap for this feature? I do not see anything in the Microsoft 365 Roadmap outside of the existing unsanctioned app filtering. Any information would be appreciated.

Thanks,

Bill

Danny Kadyshevitch
Former Employee
Jan 07, 2020
Hi Bill Brennan,

This feature is included in our Q1CY20 roadmap which was not yet published.

I will be able to provide more details on timelines soon.

Thanks,

Danny.
- Cristian Calinescu
  Brass Contributor
  Jan 22, 2021
  Danny Kadyshevitch - Are there any updates in regards to the granularity for excluding users or devices from Unsanctioned apps so some users would still be able to access the app and still be blocked for all other users?
  Thank You.
  - Boris_Kacevich
    Former Employee
    Jan 24, 2021
    Cristian Calinescu
    
    We are planning to add device group based exclusion/inclusion in 2021 H1 CY.
    
    User group based exclusion is planned as well, no ETA currently.