Sharepoint block download with conditional Access

Question

Try my best to disable downloads for a group of users by setting up conditional Access on AADMy Setup:Users: include test UsersCloud-Apps: All Cloud-AppsConditions: All Devices, All AppsSession: App-Controll, Downloads blockingSorry have to translate the Settings. The Users still can download from the Sharepoint side...&nbsp;any tipps ?

christianjbergstrom · Answer

CA App Control use Defender for Cloud Apps so are you licensed? If so, have you configured the app connection in there?

indy · Answer

ChristianJBergstrom&nbsp;Thanks for the Reply, we have a AD Premium P1 License, can you give me some info what you mean wit configured the App connection in there ?

christianjbergstrom · Answer

Hi, AAD P1 enables CA but to be able to use MDCA you must be licensed for that. See this detailed licensing chart to see if you can use it or not https://aka.ms/M365EnterprisePlans

indy · Answer

Thanks for the Reply, so de function to Licence is Microsoft Defender for Cloud Apps right? And there is no other way to Protect SP from Download?

christianjbergstrom · Answer

You can use session based CA with app enforced restrictions for achieving a limited web experience. It requires integration with SPO setting for CA. Or using a sensitivity label for containers where you can specify the limitations. These will not block downloads but remove the download alternative.

Forum Discussion

Sharepoint block download with conditional Access

5 Replies

Resources