Allow file sharing in chat but block OneDrive service

%3CLINGO-SUB%20id%3D%22lingo-sub-2166036%22%20slang%3D%22en-US%22%3EAllow%20file%20sharing%20in%20chat%20but%20block%20OneDrive%20service%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-2166036%22%20slang%3D%22en-US%22%3E%3CDIV%20class%3D%22lia-message-subject-wrapper%20lia-component-subject%20lia-component-message-view-widget-subject-with-options%22%3E%3CSPAN%3EA%20customer%20transitioning%20from%20S4B%20to%20Team%20is%20implementing%20a%20gradual%20deployment%20of%20Teams%20where%20they%20want%20to%20provide%20the%20same%20functionalities%20of%20Skype%2C%20specifically%20the%20ability%20to%20share%20files%20in%20a%20Team's%20chat%20(which%20require%20users%20having%20a%20OneDrive%20license)%3C%2FSPAN%3E%3C%2FDIV%3E%3CDIV%20class%3D%22lia-message-body%20lia-component-message-view-widget-body%20lia-component-body-signature-highlight-escalation%20lia-component-message-view-widget-body-signature-highlight-escalation%22%3E%3CDIV%20class%3D%22lia-message-body-content%22%3E%3CP%3EThey%20however%20don't%20want%20to%20enable%20OneDrive%20as%20service%20per%20se%2C%20outside%20of%20the%20file%20sharing%20in%20Teams%20chats.%20They%20also%20don't%20use%20Teams%20channels%20for%20the%20moment.%3C%2FP%3E%3CP%3EIn%20Teams%20the%20Files%20app%2Ficon%20can%20be%20easily%20hidden%2C%20the%20OneDrive%20client%20is%20not%20available%20on%20devices%2C%20which%20leave%20me%20with%20the%20OneDrive%20URLs%20to%20block.%3C%2FP%3E%3CP%3EWhat%20would%20be%20the%20best%20way%20to%20do%20this%3F%3C%2FP%3E%3CP%3EFirewalls%20and%20proxy%20are%20not%20an%20option%20as%20devices%20(managed)%20are%20used%20outside%20the%20corporate%20network.%3C%2FP%3E%3CP%3EI%20have%20looked%20into%20Conditional%20Access%20and%20MCAS%20but%20they%20both%20don't%20seem%20to%20cut%20it%20for%20this%20use%20case%3C%2FP%3E%3C%2FDIV%3E%3C%2FDIV%3E%3C%2FLINGO-BODY%3E%3CLINGO-LABS%20id%3D%22lingo-labs-2166036%22%20slang%3D%22en-US%22%3E%3CLINGO-LABEL%3EAzure%20Active%20Directory%3C%2FLINGO-LABEL%3E%3CLINGO-LABEL%3ESecurity%3C%2FLINGO-LABEL%3E%3C%2FLINGO-LABS%3E
Contributor
A customer transitioning from S4B to Team is implementing a gradual deployment of Teams where they want to provide the same functionalities of Skype, specifically the ability to share files in a Team's chat (which require users having a OneDrive license)

They however don't want to enable OneDrive as service per se, outside of the file sharing in Teams chats. They also don't use Teams channels for the moment.

In Teams the Files app/icon can be easily hidden, the OneDrive client is not available on devices, which leave me with the OneDrive URLs to block.

What would be the best way to do this?

Firewalls and proxy are not an option as devices (managed) are used outside the corporate network.

I have looked into Conditional Access and MCAS but they both don't seem to cut it for this use case

0 Replies