This is somewhat helpful just for awareness that these options exist, but reading through the options is something anyone can do. What would be really helpful is to see a demo of this in action...to demonstrate installing an app so we can see how these restrictions and the consent actually works. For example, In my lab, I tried locking down user consent by selecting "Do not allow user consent", but I found that users can still install apps and enterprise apps, so there is a major detail missing somewhere. It would be nice to see how to handle these kinds of pitfalls.
Hi Andy, great video! Is there a way to send a personalised automatic reply to users requesting access to certain applications through Azure Enterprise Apps. If so, could you please advise on how I could do it. Thanks in advance!
Gosh a specific Q. If you're looking for a magic button, then no. However it could be a combination Power Automate and Dynamic Group membership. At least that's what I would do. Good luck :-)
Hi Andy, thanks for the video! I have a question - that we wanted to allow some apps to be auto-consent by a group of users, meaning as long as a user belongs to this group, they wil sign in to Zoom directly without requesting manual admin consent. How will I be able to do that? I've searched around but didn't find a solution.
One possible solution here is to power automate the process. That said, zoom uses multifactor, authentication. Present, I’m not sure how to overcome this. I will check out docs.microsoft.com for a potential solutions here. Sorry I couldn’t be more helpful.
Hi Andy, i m very new to join azure community, you youtube informatiokn is very useful for me. But then i want to ask if you have any vedio from the view of the user, product and data onwer? As my departmenr currently initital a new dynamic 356 integration with old system, so i m the project owner, as well as the data and product owner for this project, however, i found our i.t implementation team and extrenal parties to instiall it , however they botj took the full control of the system. they are always deny my request , keep charging us a big money, and postpone for 4 months already, they even limited my data view, it is very frasturing feel like to lose my data control and businesa control, i want to ask if you can give me a bit insight, ( i become a pro user now) 1. Is there any way i can ask the azure goble team to assign me more powerful role in azure,, to gain back the control in environmental 2.any where should we define ourselft as a business owner ? I guess they just put me as normla user
Hi thanks for reaching out. Hmm too be honest I'm not a Dynamics guy. Also I tend to focus on what I know which is the admin side. I want to offer a really good site for IT Pros. There are loads of site for users, but one that I recommend to you would be Kevin Stratvert. He has some awesome content for users and he's ex Microsoft. You can find his channel here ru-vid.com I hope this helps.
@@AndyMaloneMVP thanks for your reply! I will take a look of his youtube. i am confuse of preset role in azure, Business owner (user) who has the ownership of the project or the implementation team to have the ownership at the end of the system. For example, in azure devop, i m being assigned a shareholder role which has very little access limit, then implementation team are being assigned system adminstrator or project adminstrator, which has the full access to all, it made me feel unconfortable to gave fulll control to them.
@@chihungngai3065 you are right. The permissions you’re talking about are end user permissions n Sharepoint for example. As a data owner you can set access permissions on content or projects that you have access too. However Admin role permissions are different and these allow you to manage users, apps etc from an admin perspective. The permissions you may need would have to be assigned by and admin.
@@AndyMaloneMVP thx Andy again. In my situation, i need to take all the responbilty if there is any leakage of the data. As a users, u will never be able say no to the i.t team as whtever ecuse they told u need to fix,if they re not happy, you will be in touble. Like i obversed i.t team allow extrrnal parties to get in the production encironemnt whihc is a brech of code conduct, but then when. I ask forthe audit log, they jsit dele it , and reset environment
