Forum Discussion

dkearns950's avatar
dkearns950
Copper Contributor
Sep 20, 2024

Ensure users installing Outlook add-ins is not allowed affecting integrated apps/add-ins

I'm working on the usual chasing Microsoft Secure Score, one that we have that gives points and takes them away on a weekly basis is this one below. We don't have the three items unchecked in User Roles to accommodate this recommendation. So I figure it is a bugged recommendation.

 

Ensure users installing Outlook add-ins is not allowed

 

However it would be nice to permanently make it so. However, we have another area in M365 Admin that has integrated apps configured for a handful of third party add-ins and of course the Teams Add-In for Outlook. Would this be affected by turning on the above recommendation? Or is this just if the end user goes to add one on their own?

 

Thank you.

  • dkearns950 

     

    Try this:

     

    1. Navigate to the Exchange admin center.
    2. Select Permissions from the navigation pane.
    3. Select User Roles.
    4. Edit the Default Role Assignment Policy by unchecking the following:
      • My Custom Apps
      • My Marketplace Apps
      • My ReadWriteMailboxApps
    5. Save the changes.
    • dkearns950's avatar
      dkearns950
      Copper Contributor

      Kidd_Ip 

      I apologize, I knew where to set that setting but my concern was that under the admin center, Settings and Integrated apps. Will turning that feature on affect apps and add-ins we allow here and deploy here?

Resources