SOLVED

SharePoint Site Level Access Controls - How to Handle IP Based Restrictions

Iron Contributor

We use SharePoint Online in our organisation. We have several sites that we wish to be restricted to only being access when on our corporate network and as such we cannot use either the IP restriction option in SharePoint Online nor Conditional Access as both are  applied at the SharePoint level. We are not using guests accounts so all are organisational accounts.

What could be our options here to apply such controls at a site level or is it possible to have more than one SharePoint instance in one's organisation so we could apply different controls at each instance?

4 Replies
best response confirmed by shocko (Iron Contributor)
Solution
Try using a container label here (for teams, groups and sites) and add an 'Authentication context' in that container label which connects to conditional access for that particular site.

https://docs.microsoft.com/en-us/microsoft-365/compliance/sensitivity-labels-teams-groups-sites?view...
Thanks for the steer! I'll test this and revert.
Do you know is this is a preview feature or Generally available?
AFAIK not in preview anymore.
1 best response

Accepted Solutions
best response confirmed by shocko (Iron Contributor)
Solution
Try using a container label here (for teams, groups and sites) and add an 'Authentication context' in that container label which connects to conditional access for that particular site.

https://docs.microsoft.com/en-us/microsoft-365/compliance/sensitivity-labels-teams-groups-sites?view...

View solution in original post