Forum Discussion

Brass Contributor

Sep 30, 2020

Restrict OfB Access by IP Address

Hi Team, Is it possible to restrict ondrive for business access based on the IP of the device? This is required for a Telco who is planning to bundle this along with their connectivity options and t...

OneDrive for Business

jcgonzalezmartin

MVP

Sep 30, 2020

You can restrict access to SharePoint Online and hence to OneDrive For Business trough the SPO Admin Center. Be careful when doing this because you might be blocking access to yourself https://docs.microsoft.com/en-us/sharepoint/control-access-based-on-network-location?WT.mc_id=M365-MVP-4015732

knsw7
Brass Contributor
Oct 01, 2020
Thanks for the inputs jcgonzalezmartin . If the AD conditional access is added, then the overall cost of the offering will go up by few more $$ for the customer. :-(.

The Telco is planning to bundle OfB with their connectivity offering, however, as the idea is to drive connectivity usage, they would like to ensure OfB is used primarily using their connectivity.
- jcgonzalezmartin
  MVP
  Oct 01, 2020
  Hi!
  The feature I have explained does not rely on conditional access, it's a feature you have in the SPO Admin Center and it does not require additional licensing
  - knsw7
    Brass Contributor
    Oct 02, 2020
    jcgonzalezmartin
    the article you shared states the following in a separate box. As AAD Conditional Access Policy restricts based on IP, wondering if this is a must to apply the IP based restrictions. In any case, I feel, for a Telco network which could be pretty vast, not sure if such a setting is viable and recommended.
    
    Important
    This feature relies on Azure AD Conditional Access policies being available. You will need an Azure AD Premium P1 or P2 subscription for this to work. For more info about this, refer to the announcement in the Azure Active Directory Identity Blog.
    
    Thanks again for looking into this.