We are delighted to share our new EIC Delivery Methodology for efficiently managing Saviynt Implementations and delivering quick time to value. CLICK HERE.

Can I import M365 apps to IGA, e.g. Exchange Online (Plan 1), as entitlement?

oscarcheng
New Contributor II
New Contributor II

We are going to change our user policy that only mailbox (Exchange Online) will be assigned to M365 A1 user.

However, from the entitlement list, we cannot find these Apps under M365 A1.

Please advise.

9 REPLIES 9

DixshantValecha
Saviynt Employee
Saviynt Employee

Hi @oscarcheng,

We are checking this and will get back to you.

DixshantValecha
Saviynt Employee
Saviynt Employee

Hi @oscarcheng

If you could provide more details about your use case, we would appreciate it

oscarcheng
New Contributor II
New Contributor II

hi @DixshantValecha ,

Currently, we will assign M365 A1 license (Entitlement name: STANDARDWOFFPACK_FACULTY and entitlement type: SKU) to each user M365 account (M365 A1 Entitlement.png). As long as the M365 A1 license is assigned, there are 28 Apps would be assigned to the user (Apps in A1.png).   

Recently, we control the user to access mailbox (refer to Expected A1 apps.png) only but no other apps, like Teams, Sharepoint etc. On M365 platform, we can uncheck these apps one-by-one or we can run the PowerShell script to remove other apps explicitly. However, it will make the workflow and the operation more complicated. We would like to know how can we only assign the Exchange online (plan 1) to user on IGA. So that we don't need to re-work on M365 platform or running PowerShell script instead. 

If you need more information, please feel free to discuss.

oscarcheng
New Contributor II
New Contributor II

hi @DixshantValecha , any advice?

DixshantValecha
Saviynt Employee
Saviynt Employee

Hi @oscarcheng,

Thank you for your patience. We are currently in the process of investigating this matter, and we will promptly furnish you with an update in the near future.

oscarcheng
New Contributor II
New Contributor II

hi @DixshantValecha  sorry for pushy.

May I know any updates from your side?

DixshantValecha
Saviynt Employee
Saviynt Employee

Hi @oscarcheng ,

Kindly provide information regarding your current Saviynt version.

oscarcheng
New Contributor II
New Contributor II

@DixshantValechawe are now running 2021. 

 

DixshantValecha
Saviynt Employee
Saviynt Employee

Hi @oscarcheng 

Your requirement as per my understanding:-

"The user currently assigns M365 A1 licenses to users, which includes 28 apps. They want to restrict access to only the Exchange Online (plan 1) app while avoiding complex manual adjustments or PowerShell scripts in the M365 platform. They are looking for a solution within their Identity Governance and Administration (IGA) system to achieve this."

Solution:-

You can achieve this requirement if you have a dedicated license for Exchange Online(the changes needs to be done on the license side) . This way, you can assign only the Exchange Online license to users and restrict access to other apps.

Please note that the entitlement type is "SKU."

Please validate and let us know if further details are needed on this.