Home
Microsoft

 Note: Today's post is guest post from another engineer on the SharePoint Online Support team.  In it, Jarai Howard discusses how tenant administrators can still have control over self-service signups, allowing them the chance to review PowerBI, PowerApps, and Flow before approving them for deployment in their production tenant.

 

We have worked a couple cases in which customers wanted to prevent users from signing up for PowerApps, Flow, or Power Bi Trials.

 

Unfortunately, there is no way to block this at the application level, as these licenses are assigned between Microsoft and the user directly and there is no way to disable it.

 

However,  it is possible to deny these services at the tenant level.  For example, here is a Power BI article examining what happens when this setting is enabled:
01_PowerBI-Self-Service-SignUp-Failure.png

https://docs.microsoft.com/en-us/power-bi/service-self-service-signupfor-power-bi

 

Here is a list of all the applications we have that use self-service sign up.

https://support.office.com/en-us/article/Using-self-service-sign-up-in-your-organization-4f8712ff-93...

 

Although we can’t prevent these trials on the application level, we can do it at the tenant level by turning this off.

The command is:

 

    Set-MSolCompanySettings – AllowAdHocSubscriptions  $false

 02_PowerShell-Example.png

After turning this off we went to a couple of the trial sites with a test user and here is what we see:

 

https://powerbi.microsoft.com/en-us/l

 03_PowerBI-Failure-Screen.png

https://powerapps.microsoft.com/en-us/

 04_PowerApps-Failure.png

https://flow.microsoft.com/en-us

05_Flow-Failure_screen.png

3 Comments

Or you can use Azure AD conditional access policies (denied) to block access per application. 

Regular Contributor

If you turn off the O365 tenant setting 'let users install trial apps and services' as noted in this article, will that also prevent people from signing up for Flow/Power Apps trial using their organization account?

Contributor

If the ad hoc, self-service sign up is disabled, does that impact anyone who currently has a trial license for one of those apps?

 

Also, with it disabled, can tenant admins assign trial licenses to individuals (or use AD groups for this)?

 

Thanks!

Brian