Forum Discussion

Hansm_NL's avatar
Hansm_NL
Copper Contributor
Oct 23, 2020

Allow Copy paste only within Office365 in Browser

Hi all,

 

We have a session policy in place to Block Copy and paste in a Browser session, but we would like to allow Copy and paste within Office 365 documents in the browser but Block outside of office 365 and non browser apps.

 

I played around with the settings but can't find the right set of settings. Anyone has any experience with this? Putting it to:
Activity: Paste
App Does not Equal Office 365 


Does not work.

Cheers,

Hans

Cloud App Security
  • Faisal_Maxnett's avatar
    Faisal_Maxnett
    Copper Contributor
    Jun 17, 2024
    Has there been any update with this?

    We're having the same exact issue with trying to allow BYOD access for Macs - we have the policy working, but would like to enable copy and pasting within a browser session (ideally in an Edge Work Profile on a Macbook).
  • Sarahzin_Shane's avatar
    Sarahzin_Shane
    Icon for Microsoft rankMicrosoft
    Oct 23, 2020

    Hansm_NL 

     

    Hi!

     

    When you say it isn't working, do you mean that MCAS is still blocking copy/paste for Office 365? Or, that MCAS is NOT blocking copy/paste for non Office 365 apps configured for conditional access app controls (CAAC)? Which other apps do you have configured for CAAC?

     

    In my test case, I was able to get MCAS to block copy/paste for GitHub and not block for Office 365 using the configuration below.

     

     

    Please let me know!

     

    Thank you!

     

    Sarahzin

    • Hansm_NL's avatar
      Hansm_NL
      Copper Contributor
      Oct 24, 2020

      Sarahzin_Shane 

       

      Hi Sarahzin,

       

      thank you for looking into this,  With these settings i am able to copy/paste the contents of files located in sharepoint to anyplace outside of office365 including desktop apps, etc.

       

      So to me it seems the only way to protect the contents is to not allow copy at all.

       

      • Sarahzin_Shane's avatar
        Sarahzin_Shane
        Icon for Microsoft rankMicrosoft
        Oct 27, 2020
        Hi Hansm_NL,

        Gotcha. If I’m understanding correctly, you don’t want the info to go from browser to 365 thick client versions, right? If that is the case, yes. Copy/Paste would need to be blocked for for Office 365. We also have a non-MCAS capability in preview, endpoint DLP, which might be something that would also help. Please let me know!

Resources