Can I import M365 apps to IGA, e.g. Exchange Online (Plan 1), as entitlement?

[oscarcheng]

We are going to change our user policy that only mailbox (Exchange Online) will be assigned to M365 A1 user.

However, from the entitlement list, we cannot find these Apps under M365 A1.

Please advise.

[DixshantValecha]

Hi @oscarcheng,

We are checking this and will get back to you.

[DixshantValecha]

Hi @oscarcheng, 

If you could provide more details about your use case, we would appreciate it

[oscarcheng]

hi @DixshantValecha ,

Currently, we will assign M365 A1 license (Entitlement name: STANDARDWOFFPACK_FACULTY and entitlement type: SKU) to each user M365 account (M365 A1 Entitlement.png). As long as the M365 A1 license is assigned, there are 28 Apps would be assigned to the user (Apps in A1.png).   

Recently, we control the user to access mailbox (refer to Expected A1 apps.png) only but no other apps, like Teams, Sharepoint etc. On M365 platform, we can uncheck these apps one-by-one or we can run the PowerShell script to remove other apps explicitly. However, it will make the workflow and the operation more complicated. We would like to know how can we only assign the Exchange online (plan 1) to user on IGA. So that we don't need to re-work on M365 platform or running PowerShell script instead. 

If you need more information, please feel free to discuss.

[oscarcheng]

hi @DixshantValecha , any advice?

[DixshantValecha]

Hi @oscarcheng,

Thank you for your patience. We are currently in the process of investigating this matter, and we will promptly furnish you with an update in the near future.

[oscarcheng]

hi @DixshantValecha  sorry for pushy.

May I know any updates from your side?

[DixshantValecha]

Hi @oscarcheng ,

Kindly provide information regarding your current Saviynt version.

[oscarcheng]

@DixshantValechawe are now running 2021. 

[DixshantValecha]

Hi @oscarcheng 

Your requirement as per my understanding:-

"The user currently assigns M365 A1 licenses to users, which includes 28 apps. They want to restrict access to only the Exchange Online (plan 1) app while avoiding complex manual adjustments or PowerShell scripts in the M365 platform. They are looking for a solution within their Identity Governance and Administration (IGA) system to achieve this."

Solution:-

You can achieve this requirement if you have a dedicated license for Exchange Online(the changes needs to be done on the license side) . This way, you can assign only the Exchange Online license to users and restrict access to other apps.

Please note that the entitlement type is "SKU."

Please validate and let us know if further details are needed on this.