Use app-enforced restrictions

These steps in the Microsoft Entra admin center tell Azure to use the SharePoint site-level access settings you specify.

1. On the Conditional Access | Policies page of the Microsoft Entra admin center, select New policy.

   👁 Conditional access policies in the Microsoft Entra admin center
   

2. In the Name box, type a name for the policy.

3. Select Users and groups, and then select whether you want the policy to apply to all users or only select users or groups.

4. Select Cloud apps or actions, select Select apps, search for SharePoint, select Office 365 SharePoint Online, and then select Select.

   👁 Selecting the SharePoint app
   

5. Select Conditions, select Client apps, switch Configure to Yes, keep all the clients selected, and then select Done.

6. Select Session, select Use app enforced restrictions, and then select Select.

   👁 Selecting to control access using app enforced restrictions
   

7. Enable the policy and select Create.