Exclude Microsoft first party applications in Azure conditional access policy
We have app built on Microsoft Graph resource and we have a conditional access policy that targets all cloud apps. when users sign into this app using Chrome browser on iOS they get error and prompt to use Edge. We do not want users to change the browser and tried to exclude Microsoft Graph from CA policy using all options including API but fails with the below error. Policy contains invalid applications: unsupported firstpartyapplication. Is there a way to exclude Microsoft Graph from the policy?
Viewing AIP protected PDF's in SharePoint/Teams
Is it possible to open a AIP protected PDF in SharePoint/Teams? If so, can can this be achieved? I can open PDF, Word, Excel, and PowerPoint files without AIP in SharePoint/Teams with no issue. I can open Word, Excel, and PowerPoint files with AIP in SharePoint/Teams with no issue. I can open AIP protected PDF's in Adobe without issue. When I try to open a PDF with AIP in SharePoint/Teams I get an message saying "This is a protected document. You can view it using a supported PDF reader app". Since I can open the same PDF file without AIP in SharePoint/Teams I would assume that SharePoint/Teams are supported PDF reader app's. As soon as I enable AIP on the PDF file, upload it to SharePoint/Teams, and try to open it I get the attached error. So my question stands. Is it possible to open a AIP protected PDF in SharePoint/Teams? If so, can can this be achieved? Any insight into my issue would be of great help. I have asked in Microsoft Discord-Cloud Services and Reddit-r/MicrosoftTeams and nobody has replied.
AIP Policies - What determines the order fo the policies? Example?
You can move AIP policies up and down. So it seems the order matters. What is an example where I would need to pay attention to the order and what does it determine? For example my users would get 3 policies: - the standard (global) policies für all company users (e.g. public, internal, confidential, restricted (protected)) - a department policy (Sales Restricted (protected)) - a policy allowing some users customized protection Would this also be the recommended order? Thanks, Franck
