We have a need to allow users access to MS Teams on BYO Mac devices, but we need to block file downloads altogether. I am trying a combination of Conditional Access policy with "Conditional Access App Control: Custom policy" + MCAS Session policy with Teams as selected app. It just doesn't seem to work. Anyone tried this before? Any suggestions? File download is not even showing up as one of the activities.
