Home

How to prevent Exchange online user to access Sharepoint?

%3CLINGO-SUB%20id%3D%22lingo-sub-236634%22%20slang%3D%22en-US%22%3EHow%20to%20prevent%20Exchange%20online%20user%20to%20access%20Sharepoint%3F%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-236634%22%20slang%3D%22en-US%22%3E%3CP%3EI%20have%20users%20with%20'Exchange%20Online%20Plan%202'%20license%20in%20my%20tenant.%3C%2FP%3E%3CP%3EI%20think%20they%20will%20be%20available%20to%20use%20email%20only%20but%20they%20can%20access%20to%20public%20sharepoint%20in%20my%20tenant.%3C%2FP%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3CP%3EHow%20to%20prevent%20Exchange%20Online%20Plan%20users%20to%20access%20sharepoint%20in%20same%20tenant%3F%3C%2FP%3E%3C%2FLINGO-BODY%3E%3CLINGO-LABS%20id%3D%22lingo-labs-236634%22%20slang%3D%22en-US%22%3E%3CLINGO-LABEL%3EMicrosoft%20365%3C%2FLINGO-LABEL%3E%3CLINGO-LABEL%3ESharePoint%3C%2FLINGO-LABEL%3E%3C%2FLINGO-LABS%3E%3CLINGO-SUB%20id%3D%22lingo-sub-250616%22%20slang%3D%22en-US%22%3ERe%3A%20How%20to%20prevent%20Exchange%20online%20user%20to%20access%20Sharepoint%3F%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-250616%22%20slang%3D%22en-US%22%3E%3CP%3EThe%20only%20way%20you'd%20be%20able%20to%20properly%20enforce%20this%20is%20with%20something%20like%20Conditional%20Access.%3C%2FP%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3CP%3EIf%20you've%20got%20Azure%20AD%20Premium%20Plan%201%20Licenses%20for%20all%20of%20your%20users%2C%20then%20you'd%20have%20some%20coverage%20for%20that.%3C%2FP%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3C%2FLINGO-BODY%3E%3CLINGO-SUB%20id%3D%22lingo-sub-248199%22%20slang%3D%22en-US%22%3ERe%3A%20How%20to%20prevent%20Exchange%20online%20user%20to%20access%20Sharepoint%3F%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-248199%22%20slang%3D%22en-US%22%3EWell%2C%20the%20problem%20you%20are%20facing%20here%20is%20that%20SPO%20does%20not%20really%20enforce%20if%20a%20user%20added%20to%20a%20SPO%20site%20has%20a%20valid%20license%20or%20not....you%20just%20can%20add%20it%2C%20so%20only%20way%20to%20prevent%20your%20users%20to%20acess%20SPO%20is%20to%20be%20sure%20no%20one%20is%20adding%20them%20to%20your%20sites%3C%2FLINGO-BODY%3E%3CLINGO-SUB%20id%3D%22lingo-sub-245942%22%20slang%3D%22en-US%22%3ERe%3A%20How%20to%20prevent%20Exchange%20online%20user%20to%20access%20Sharepoint%3F%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-245942%22%20slang%3D%22en-US%22%3E%3CP%3EHi%20there%3CBR%20%2F%3E%26nbsp%3B%3C%2FP%3E%3CP%3ETechnically%20this%20is%20not%20possible.%3CBR%20%2F%3E%26nbsp%3B%3CBR%20%2F%3EI%20tried%20assigning%20E3%20license%20to%20a%20new%20user%20and%20disabling%20SharePoint%20Online%20Plan%202%20and%20got%20the%20below%20error%20-%26nbsp%3B%3C%2FP%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3CP%3ETo%20assign%20a%20license%20that%20contains%20Office%20Online%2C%20you%20must%20also%20assign%20one%20of%20the%20following%20service%20plans%3A%20SharePoint%20Online%20(Plan%202).%3CBR%20%2F%3E%26nbsp%3B%3CBR%20%2F%3EGot%20the%20same%20error%20when%20I%20tried%20to%20disable%20SharePoint%20Online%20Plan%201%20for%20an%20active%20user%20who%20has%20an%20E1%20license.%3C%2FP%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3CP%3ESo%20quite%20sure%20same%20goes%20for%20Exchange%20Online%20Plan%202%3CBR%20%2F%3E%26nbsp%3B%3CBR%20%2F%3EThanks%3CBR%20%2F%3E%26nbsp%3B%3CBR%20%2F%3ERobin%20Nishad%3CBR%20%2F%3E-----------------%3CBR%20%2F%3ETechnical%20Consultant%3CBR%20%2F%3E%26nbsp%3B%3C%2FP%3E%3C%2FLINGO-BODY%3E%3CLINGO-SUB%20id%3D%22lingo-sub-663820%22%20slang%3D%22en-US%22%3ERe%3A%20How%20to%20prevent%20Exchange%20online%20user%20to%20access%20Sharepoint%3F%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-663820%22%20slang%3D%22en-US%22%3E%3CP%3EExperienced%20this%20as%20well.%20as%20long%20as%20the%20user%20has%20permissions%20to%20the%20site%20whether%20he%20has%20license%20or%20not%20then%20he%20can%20access%20the%20sharepoint%20site.%20Even%20open%2Fcreate%20Office%20Online%20Documents%3C%2FP%3E%3C%2FLINGO-BODY%3E
Chawaphol Eakbunnasingh
New Contributor

I have users with 'Exchange Online Plan 2' license in my tenant.

I think they will be available to use email only but they can access to public sharepoint in my tenant.

 

How to prevent Exchange Online Plan users to access sharepoint in same tenant?

4 Replies

Hi there
 

Technically this is not possible.
 
I tried assigning E3 license to a new user and disabling SharePoint Online Plan 2 and got the below error - 

 

To assign a license that contains Office Online, you must also assign one of the following service plans: SharePoint Online (Plan 2).
 
Got the same error when I tried to disable SharePoint Online Plan 1 for an active user who has an E1 license.

 

So quite sure same goes for Exchange Online Plan 2
 
Thanks
 
Robin Nishad
-----------------
Technical Consultant
 

Well, the problem you are facing here is that SPO does not really enforce if a user added to a SPO site has a valid license or not....you just can add it, so only way to prevent your users to acess SPO is to be sure no one is adding them to your sites

The only way you'd be able to properly enforce this is with something like Conditional Access.

 

If you've got Azure AD Premium Plan 1 Licenses for all of your users, then you'd have some coverage for that.

 

 

Experienced this as well. as long as the user has permissions to the site whether he has license or not then he can access the sharepoint site. Even open/create Office Online Documents

Related Conversations
Stable version of Edge insider browser
HotCakeX in Discussions on
35 Replies
Tabs and Dark Mode
cjc2112 in Discussions on
30 Replies
flashing a white screen while open new tab
Deleted in Discussions on
14 Replies
How to Prevent Teams from Auto-Launch
chenrylee in Microsoft Teams on
29 Replies