Step 6: Go to ‘Session’ and select ‘Block downloads (preview)’ from the dropdown under ‘Use Conditional Access App Control’. This control works instantly for featured apps and can be self-onboarded for any app.Īfter this, when a user tries to access SharePoint, it shows the following error. Don’t forget to toggle the ‘Configure’ button to ‘Yes’. I have selected ‘browser’ (specific client on which the policy will get applied). Step 5: Select ‘Client apps’ under ‘Condition’ section. Step 4: Include ‘Office 365 SharePoint Online’ under ‘Clouds apps or actions’. Step 3: Under ‘Assignments’, choose the users and groups you want to include in the policy. I have named the policy ‘Restrict downloads’. Step 2: Create a new policy by giving the appropriate name.

Step 1: Visit Azure Active Directory -> Security -> Conditional Access. To configure conditional access policies for blocking file downloads, follow the steps given below. This process has been simplified with the new block download policy for SharePoint sites and OneDrive, which is currently in preview. Firstly, let’s examine how to create a CA policy to block SharePoint Online file downloading.īlock File Downloads in SharePoint and OneDrive using Conditional Access Policy

SharePoint Online is one of the greatest collaboration platforms that lets users work on files, folders, and pages. To sweeten the deal, SharePoint Online also allows users to download the documents in times of need. In certain cases, however, it is not a good idea for users to be able to download documents as it may lead to confidential data loss. Configuring conditional access policies is one method to prevent users downloading documents from specific sites.

How to use one drive