Now that we have seen storage and site
creation management, let's take a look at
access control. SharePoint offers a few
controls on access, such as unmanaged
devices, idle section timeout, network
location, and controlling apps that do not
use modern authentication. Let's take a
look at them in detail. First of all, the
unmanaged devices setting allows you to
restrict access from devices that aren't
marked as compliant in Intune or joined to
your domain. You can set it to multiple
options from allow full access to allow
limited, web-only access, which blocks
users from downloading, printing, or
syncing files or completely blocking
access. If you do not want to set the
policy at the tenant level, you can also
set it at the site level as well. The idle
session timeout control allows you to
automatically sign out users from Office
365 after a certain duration of time. The
idle counter is limited to activity inside
SharePoint and OneDrive for Business, so
only works if you have SharePoint or
OneDrive for Business opened, but it would
sign you out of all of Office 365. You can
also set a warning time. This way, the
users get a popup warning them before they
get signed out. Next up, the network
location. This setting allows you to
restrict connectivity from an IP address
range. This way, you would only allow
users to sign in while in the office or
connected to the VPN. Lastly, modern
authentication. App-based conditional
access with app protection policies rely
on application using modern
authentication, which is an implementation
of OAuth2. Most current office mobile and
desktop applications use modern
authentication; however, there are still
some third-party apps and older Office
apps that use other authentication methods
such as basic authentication or form-based
authentication, and SharePoint allows you to block them if you wish to do so.