My company wants to roll out the Viva Connections home site to users with personal devices. We have the home site set up in Teams are able to use MAM policies on personal devices to get Teams in secure state.

BUT the bosses want to only allow the end users with personal devices to have access to the home site and not the rest of SharePoint / OneDrive. I know about using CA policies to block all of OneDrive and SharePoint or to block specific sites via SharePoint Advanced Management, but I need more less of a blocklist and more of an allowlist with only one site allowed.

I don't think that this is actually possible and have informed the bosses of this, but I thought I would check here with the pros to see if my suppositions are correct.

Thanks!

My company wants to roll out the Viva Connections home site to users with personal devices. We have the home site set up in Teams are able to use MAM policies on personal devices to get Teams in secure state.

BUT the bosses want to only allow the end users with personal devices to have access to the home site and not the rest of SharePoint / OneDrive. I know about using CA policies to block all of OneDrive and SharePoint or to block specific sites via SharePoint Advanced Management, but I need more less of a blocklist and more of an allowlist with only one site allowed.

I don't think that this is actually possible and have informed the bosses of this, but I thought I would check here with the pros to see if my suppositions are correct.

Thanks!

• office365
• sharepoint-online
• microsoft-entra-id

1 Answer 1

@Pizza_Potamus

SharePoint Online doesn't natively support a strict "allowlist-only" access model for individual sites when Conditional Access (CA) or even SharePoint Advanced Management (SAM) is involved.