Exclude Teams from conditional access

Question

I found this conversation:https://answers.microsoft.com/en-us/msoffice/forum/all/microsoft-teams-and-conditional-access/6c36e213-9386-41a1-a076-7c325a4e82a2&nbsp;an have the same issue. How to block all Office 365 Apps &amp; exclude Teams?&nbsp;I want to block on external networks the access to SharePoint Online, but allow Teams. Is there a way to accomplish that?&nbsp;Thanks

vasilmichev · Answer

Well Teams uses SPO at the backend, so are you OK with blocking access to any files-related functionality? And how exactly do you envision preventing external access, do you mean blocking Guest users or?

mecrotech · Answer

viny1991&nbsp;&nbsp;External access to other cloud applications can be restricted through conditional access policies, yes, but at the expense of the related functionality being restricted in the Teams client for external users.&nbsp;Without external Exchange access the user will have no channel or private chat functionality.&nbsp;Without OneDrive for Business access, the user will not be able to privately share any files.&nbsp;Without SharePoint Online access, the user will not be able to access Teams and channel files.&nbsp;Another consideration is that if 2FA is enabled for SharePoint, OneDrive, or Exchange, then it should be enabled for Teams also, otherwise the corresponding functionality will be restricted.

giannox · Answer

Yes, i know that. So is there a way to do this?

The idea was, when employees are not in the internal office network, they cannot use SharePoint & OneDrive but can use Teams for communication.

vasilmichev · Answer

For that scenario, I would recommend simply adding IP restriction in the SPO/ODFB admin portal.

viny1991 · Answer

VasilMichev&nbsp;In my case, I have a specific group that will have access to Teams externally, but even creating the specific exclusion for it, it is being blocked. I saw that Sharepoint Online and Exhange Online also affect Teams, however the off-line release for this group is only for Teams and not the other applications. I have a case that looks like this:&nbsp;https://answers.microsoft.com/en-us/msoffice/forum/all/microsoft-teams-and-conditional-access/6c36e213-9386-41a1-a076-7c325a4e82a2&nbsp;Is there a method to solve this problem?

Forum Discussion

Exclude Teams from conditional access

5 Replies

Resources