microsoft teams and permissions
2 TopicsHelp with Permission Policies and/or Setup Policies
I'm trying to deploy different apps targeting specific users. The problem I'm having is that If I assign a permission policy (or setup policy) to a user, it seems to remove that user from another permission/setup policy the user was already assigned previously. For example, I want to deploy the Adobe Acrobat app and a custom chatbot app. The Adobe app is targeting most users. Whereas the custom app is targeting only a small number of users, some of which are to have the Adobe app. For example: We have users 1 through 5 assigned the Adobe app permission and setup policies We have users 3 and 5 assigned the custom chatbot app permission and setup policies The expected outcome: Users 1 through 5 to have access to the Adobe app, be installed, and pinned in Teams. Users 3 and 5, in addition to the Adobe app, they should have access, installed, and pinned in Teams the Custom chatbot app. Actual outcome: It seems that if the Adobe app was assigned first, when assigning the custom app to users 3 and 5, they no longer have the permission/setup policy for the Adobe app and vice versa. If the custom app is assigned first, when assigning the Adobe app, it removes the permissions from the Adobe app. Is this the expected behavior? and can you confirm if the policies below are configured correctly for trying to achieve the deployment of multiple apps without affecting previous deployments of users that have permissions to other apps? It seem that only one permission and setup policy can be applied per user. Is that correct? If so, how does one deploy multiple apps to different people where there might be some overlap in some users needing access to multiple apps and other users to only a specific app. My Global permission policy is as follows: Microsoft apps: Allow all apps Third-party apps: Block all apps Custom apps: Block all apps The Adobe app permission policy is as follows: Microsoft apps: Allow all apps Third-party apps: Allow specific apps and block all others (Adobe Acrobat) Custom apps: Block all apps Assignment Example: User1, User2, User3, User4, User5 The custom chatbot app permission policy is as follows: Microsoft apps: Allow all apps Third-party apps: Block all apps Custom apps: Allow specific apps and block all others (custom chatbot app) Assignment Example: User3, User5 The Global setup policy is as follows: Upload custom apps: Off User Pinning: On Installed apps: "Tasks by Planner and To Do" Pinned apps: Added "Tasks by Planner and To Do" at the bottom of the default list of pinned apps Acrobat app setup policy: Upload custom apps: Off User pinning: On Installed apps: "Adobe Acrobat" Pinned apps: Added "Adobe Acrobat" at the bottom of the default list of pinned apps Custom chatbot app setup policy: Upload custom apps: Off User pinning: On Installed apps: "Custom chatbot app" Pinned apps: Added "Custom chatbot app" at the bottom of the default list of pinned appsSolved1.3KViews0likes1CommentChannel and Group permissions
Is is possible to allow access to a group for just certain domains, and then for different channels to only view different domains? eg Group - add permission for using in domains @dummy.co.uk and sample.co.uk then for the Private Dummy Channel to only allow access to users from the domain dummy and for the Private Sample Channel to only allow access to users from the domain sample Many thanks1.3KViews1like1Comment