Exclude Azure portal login while creating microsoft account using Office 365

%3CLINGO-SUB%20id%3D%22lingo-sub-834355%22%20slang%3D%22en-US%22%3EExclude%20Azure%20portal%20login%20while%20creating%20microsoft%20account%20using%20Office%20365%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-834355%22%20slang%3D%22en-US%22%3E%3CP%3EWe%20use%20Office%20365%20to%20manage%20microsoft%20account%20for%20our%20organization%20%2C%20I%20want%20to%20know%20if%20there%20is%20any%20way%20that%20we%20can%20exclude%20Azure%20portal%20access%20of%20a%20fresh%20account%20we%20are%20creating%20%3F%20so%20that%20the%20new%20user%20will%20not%20get%20azure%20portal%20access%20%3F%3C%2FP%3E%3C%2FLINGO-BODY%3E%3CLINGO-LABS%20id%3D%22lingo-labs-834355%22%20slang%3D%22en-US%22%3E%3CLINGO-LABEL%3EAzure%3C%2FLINGO-LABEL%3E%3CLINGO-LABEL%3EAzure%20Resource%20Management%3C%2FLINGO-LABEL%3E%3CLINGO-LABEL%3EDevOps%3C%2FLINGO-LABEL%3E%3C%2FLINGO-LABS%3E%3CLINGO-SUB%20id%3D%22lingo-sub-834952%22%20slang%3D%22en-US%22%3ERe%3A%20Exclude%20Azure%20portal%20login%20while%20creating%20microsoft%20account%20using%20Office%20365%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-834952%22%20slang%3D%22en-US%22%3EIf%20it%20were%20me%20I'd%20restrict%20access%20to%20Azure%20AD%20portal%20via%20Conditional%20Access%20(P1%20feature)%20and%20only%20exclude%20those%20accounts%20that%20should%20have%20access%20i.e%20your%20global%20admin%20and%20other%20admin%20roles%20in%20azure.%3C%2FLINGO-BODY%3E%3CLINGO-SUB%20id%3D%22lingo-sub-850500%22%20slang%3D%22en-US%22%3ERe%3A%20Exclude%20Azure%20portal%20login%20while%20creating%20microsoft%20account%20using%20Office%20365%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-850500%22%20slang%3D%22en-US%22%3EHi%2C%20can%20you%20please%20guide%20me%20on%20how%20to%20do%20that%3F%20or%20provide%20any%20docs%20on%20that%3F%3C%2FLINGO-BODY%3E%3CLINGO-SUB%20id%3D%22lingo-sub-854120%22%20slang%3D%22en-US%22%3ERe%3A%20Exclude%20Azure%20portal%20login%20while%20creating%20microsoft%20account%20using%20Office%20365%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-854120%22%20slang%3D%22en-US%22%3EHey%20%3CA%20href%3D%22https%3A%2F%2Ftechcommunity.microsoft.com%2Ft5%2Fuser%2Fviewprofilepage%2Fuser-id%2F397187%22%20target%3D%22_blank%22%3E%40arani007%3C%2FA%3E%2C%20go%20to%3A%20%3CA%20href%3D%22https%3A%2F%2Fportal.azure.com%2F%23blade%2FMicrosoft_AAD_IAM%2FConditionalAccessBlade%2FPolicies%22%20target%3D%22_blank%22%20rel%3D%22nofollow%20noopener%20noreferrer%20noopener%20noreferrer%22%3Ehttps%3A%2F%2Fportal.azure.com%2F%23blade%2FMicrosoft_AAD_IAM%2FConditionalAccessBlade%2FPolicies%3C%2FA%3E%20to%20create%20new%20CA%20policies.%20But%20I%20wouldn't%20know%20how%20to%20restrict%20the%20access%20to%20Azure%20AD%20Portal%20with%20it.%20Maybe%20%3CA%20href%3D%22https%3A%2F%2Ftechcommunity.microsoft.com%2Ft5%2Fuser%2Fviewprofilepage%2Fuser-id%2F26736%22%20target%3D%22_blank%22%3E%40Viktor%20Hedberg%3C%2FA%3E%20can%20tell%20us.%20Did%20you%20set%20the%20%22restrict%20access%20for%20users%22%20switch%20in%20the%20Azure%20AD%20-%20User%20settings%20to%20%22No%22%3F%20Check%3A%20%3CA%20href%3D%22http%3A%2F%2Fwww.rebeladmin.com%2F2019%2F04%2Fstep-step-guide-restrict-azure-ad-administration-portal%2F%22%20target%3D%22_blank%22%20rel%3D%22nofollow%20noopener%20noreferrer%20noopener%20noreferrer%22%3Ehttp%3A%2F%2Fwww.rebeladmin.com%2F2019%2F04%2Fstep-step-guide-restrict-azure-ad-administration-portal%2F%3C%2FA%3E%3C%2FLINGO-BODY%3E
Highlighted
Occasional Contributor

We use Office 365 to manage microsoft account for our organization , I want to know if there is any way that we can exclude Azure portal access of a fresh account we are creating ? so that the new user will not get azure portal access ?

3 Replies
Highlighted
If it were me I'd restrict access to Azure AD portal via Conditional Access (P1 feature) and only exclude those accounts that should have access i.e your global admin and other admin roles in azure.
Highlighted
Hi, can you please guide me on how to do that? or provide any docs on that?
Highlighted
Hey @arani007, go to: https://portal.azure.com/#blade/Microsoft_AAD_IAM/ConditionalAccessBlade/Policies to create new CA policies. But I wouldn't know how to restrict the access to Azure AD Portal with it. Maybe @Viktor Hedberg can tell us. Did you set the "restrict access for users" switch in the Azure AD - User settings to "No"? Check: http://www.rebeladmin.com/2019/04/step-step-guide-restrict-azure-ad-administration-portal/