Procedure
- Navigate to Resources > Internet and SaaS Resources.
- Select Tenant Controls.
- Click Add or expand the default Global Tenant Controls profile.
Tenant controls is enabled by default for a rule. A rule uses the default global tenant controls profile if no other tenant controls profile is configured for that rule.
- Give your configuration a descriptive Profile Name and select Microsoft 365.
- To grant access to Microsoft 365 from within your organization:
- Add your organization's Microsoft 365 Tenant Domain and click Add.
You can add multiple Tenant Domains.
- Optionally, add your organization's Tenant Directory ID for Microsoft 365.
This ID is used to track Office 365 access in Azure Reports.
For more information about how to acquire the Tenant Directory ID, see Microsoft's documentation or contact Microsoft Support.
- Add your organization's Microsoft 365 Tenant Domain and click Add.
- Optionally, click the toggle to Block Personal Microsoft 365 accounts.
- Click Save.
Result: The new Tenant Controls profile is now available for selection when you add an internet access rule. For rule requirements specific to tenant controls, see Use Tenant Controls in Access Rules.
