Allow Copy paste only within Office365 in Browser

[Hansm_NL]

Hi all,

We have a session policy in place to Block Copy and paste in a Browser session, but we would like to allow Copy and paste within Office 365 documents in the browser but Block outside of office 365 and non browser apps.

I played around with the settings but can't find the right set of settings. Anyone has any experience with this? Putting it to:
Activity: Paste
App Does not Equal Office 365 

Does not work.

Cheers,

Hans

[#2]

@Hansm_NL 

Hi!

When you say it isn't working, do you mean that MCAS is still blocking copy/paste for Office 365? Or, that MCAS is NOT blocking copy/paste for non Office 365 apps configured for conditional access app controls (CAAC)? Which other apps do you have configured for CAAC?

In my test case, I was able to get MCAS to block copy/paste for GitHub and not block for Office 365 using the configuration below.

Please let me know!

Thank you!

Sarahzin

[#3]

@Sarahzin_Shane 

Hi Sarahzin,

thank you for looking into this,  With these settings i am able to copy/paste the contents of files located in sharepoint to anyplace outside of office365 including desktop apps, etc.

So to me it seems the only way to protect the contents is to not allow copy at all.

[#4]

Hi @Hansm_NL,

Gotcha. If I’m understanding correctly, you don’t want the info to go from browser to 365 thick client versions, right? If that is the case, yes. Copy/Paste would need to be blocked for for Office 365. We also have a non-MCAS capability in preview, endpoint DLP, which might be something that would also help. Please let me know!

[#5]

@Sarahzin_Shane 

Hi how to we get access to non-MCAS capability? 

We want allow copy paste within office 365 web apps 

But as soon as they want to paste the item outside office 365 web apps it stops them from doing so.

please advise.

Many Thanks

Jessel