sharepoint and intune app protection policy

[jrngsg]

when sharepoint android app is protected by intune app protection policy & does not allow local storage for 'allow user to save copies to selected services', viewing image file will have this error 'action blocked. download is disabled due to policy restrictions'.

anyone having the same behavior?

[#2]

@jrngsg in your app protection policy that is protecting sharepoint what is the send org data to other apps is set ? 

[#3]

@eliekarkafy policy managed apps

[#4]

@jrngsg use the below settings and try to open your attachment 

[#5]

@eliekarkafy my policy is already set the same as yours.

[#6]

do you have any other policy restrictions for downloading from M365 apps such as DLP policy or any other Intune policy that may conflict with that one?

[#7]

I don't have any. But for yours it worked?

[#8]

@jrngsg 

i implemented this last week for a client and its working.

check this 

Go to OneDrive Admin > Device access > Mobile application management > turn on the Deploy this policy > unselect Block downloading files in the apps

[#9]

also check if any conditional access is blocking you or any settings with Microsoft cloud apps

[#10]

@eliekarkafy I'm sorry. could you help me because i could not find 'device access'

[#11]

@jrngsg sorry I forgot to mention that the block option was moved to Intune using the app protection policy but let's check the below as well. 

[#12]

i have the same settings as you - "Allow full access from desktop apps, mobile apps and the web"

[#13]

There is something else that is blocking the download action. Did you check if any condition access in place with MDCA ?