Services
Summary
Microsoft Teams introduces a public preview of preapproval policies for RSC permissions, enabling admins to control user consent for RSC on an app-by-app basis. Rollout begins June 24, 2024, for Targeted Release and mid-September 2024 for General Availability. Admins can learn to manage these policies via PowerShell cmdlets. No action is required for the rollout.
Details
We are excited to announce public preview of preapproval policies for resource-specific consent (RSC) permissions. Preapproval policies for RSC permissions (enabled by PowerShell cmdlets) give admins the ability to allow users to grant consent to data through RSC without having to allow all RSC enabled applications in their organization. This feature will allow admins to create policies to allow users to consent to RSC permissions on an app-by-app basis.
When this will happen:
Targeted Release: We began rolling out June 24, 2024, and expect to complete by late June 2024.
General Availability (Worldwide, GCC, GCC High, DoD): We will begin rolling out mid-September 2024 and expect to complete by late September 2024.
How this will affect your organization:
Before this rollout: Apps that used RSC permissions required admins to enable organization-wide settings, allowing users to consent to all RSC-enabled apps.
After this rollout: Preapproval policies will give admins more granular control over which RSC-enabled apps are available to users and enables better management of app upgrades that require new permissions.
With preapproval policies, users can grant RSC permission to their resources on an app-by-app basis. This means admins can approve apps for a particular set of permissions while keeping RSC blocked for all other applications. Admins can enable multiple preapproval policies to create custom RSC consent abilities in their organization. Admins will also be able to set preapproval policies based on sensitivity labels for Teams, allowing apps to be installed in Teams with certain sensitivity labels but not others.
Preapproval policies are enabled by a set of PowerShell cmdlets for now. Admins who have never used PowerShell to manage Teams can learn more about using PowerShell and the preapproval policy documentation.
This new feature is accessible to all Teams admins with appropriate permissions.
What you need to do to prepare:
Admins do not need to take action for this rollout. No existing settings will be changed or affected by this rollout. Admins who wish to utilize the new preapproval policies should refer to the preapproval policy documentation.
You may want to notify your admins about this change and update any relevant documentation as appropriate.
Learn more