Currently inside the SharePoint Online admin center, we can define a global setting to define limited access for all users and for all sites when accessed using unmanaged devices.

enter image description here

but can this be more flexible? so we define that only certain sites and only certain users will have limited access when accessed from unmanaged devices? so this setting will not affect all users and all sites?

1 Answer 1


Yes you can, by using sensitivity labels in Microsoft 365. When that is done you can turn to PowerShell and run this as an example:

Set-SPOSite -Identity https://<SharePoint online URL>/sites/<name of site or OneDrive account> -ConditionalAccessPolicy AllowLimitedAccess

However, for specific users that's not an option. You can only do this for all users on a specific site. See https://learn.microsoft.com/en-us/sharepoint/control-access-from-unmanaged-devices#block-or-limit-access-to-a-specific-sharepoint-site-or-onedrive

  • 1
    thanks for the great reply
    – John John
    Oct 6, 2022 at 9:16

Your Answer

By clicking “Post Your Answer”, you agree to our terms of service and acknowledge you have read our privacy policy.

Not the answer you're looking for? Browse other questions tagged or ask your own question.