CA policy for Office 365 Exchange Online

Question

I have created 2 Conditional Access Policies, one for Teams and another for Outlook.

Teams Policy - Block Access to Teams except if a member of a group
Cloud App Selected: Teams

Outlook - Block Access to Outlook except if a member of a group
Cloud App Selected: Office 365 Exchange Online

The issue i'm having is when I make a user member of the Teams group, the user is getting blocked under the Outlook Policy. Does Office 365 Exchange Online App include Teams?

Answer 1

@Kamran Ahmed Yes, Microsoft Teams have dependencies on other Office 365 applications such as SharePoint or Exchange Online. So, the CA policy configured to block Exchange Online, blocks Microsoft Teams as well.

This is documented here: https://learn.microsoft.com/en-us/azure/active-directory/conditional-access/concept-conditional-access-cloud-apps#office-365-preview

"Office 365 provides cloud-based productivity and collaboration services like Exchange, SharePoint, and Microsoft Teams. Office 365 cloud services are deeply integrated to ensure smooth and collaborative experiences. This integration can cause confusion when creating policies as some apps such as Microsoft Teams have dependencies on others such as SharePoint or Exchange."

-----------------------------------------------------------------------------------------------------------

Please "Accept as answer" wherever the information provided helps you to help others in the community.

Answer 2

QnA currently supports the products listed in right-hand pane (more to be added) Better to reach out to subject matter experts in dedicated forums over here.

https://social.technet.microsoft.com/Forums/msonline/en-US/home?forum=onlineservicesexchange

https://social.technet.microsoft.com/Forums/msonline/en-US/home?forum=msteams

(please don't forget to mark helpful replies as answer)