Prevent Users from assigning developer plan

(0) Share

Report

Posted on by cycuS

Hello,

I have a problem with developer environments in my tenant.

Developer environments are created when someone signs in to the Developer plan through this site: https://signup.microsoft.com/

I was trying to block these things by using those commands: https://learn.microsoft.com/en-us/power-platform/admin/powerapps-powershell#block-trial-licenses-commands.

Remove-AllowedConsentPlans
Add-AllowedConsentPlans
Get-AllowedConsentPlans

But users still can assign developer license themselves.

Is there any way of blocking it? Maybe the self-service sign up would work in this case?

Kind regards,

Daniel

Categories:

Governance & administering

All responses (5)

Answers (0)

Sort by

power-guy 17 on at

Like
a
(0)

Report
Copy link

Link copied!
Hi Daniel -

This can be a bit complicated because there are two different types of trial licenses for Power Platform.
Internal - plans that only Power Platform knows about
Viral - plans that are visible in both Power Platform and Azure AD
When you use Remove/Get/Add-AllowedConsentPlans, you're adjusting Power Platform's ability to recognize and assign these types of licenses, but it has little ability to influence sign-ups that happen through Microsoft's more general commerce engine.

If the final URL where sign up is happening has "signup.microsoft.com" at the top of the page, typically that's the commerce engine & what Power Platform would consider a viral plan. These are typically controlled through Set-MsolCompanySettings -AllowAdhocSubscriptions. You'd see a plan assigned to the user in portal.azure.com under licenses if it's a viral plan. Based on your screenshot above, I'd say this is a viral plan!

If it's something else (e.g. https://apps.powerapps.com/community/signup), it's typically an internal plan.

A while back I put together a reference I refer to still today that might serve helpful of how the two settings (Remove-AllowedConsentPlans & AllowAdhocSubscriptions) interact. Hope you find it helpful!
power-guy 17 on at

Like
a
(0)

Report
Copy link

Link copied!

FYI, I typically like to make Set-MsolCompanySettings -AllowAdhocSubscription "false" and remove internal plans only. This allows a license admin in portal.azure.com to still assign viral trials and have power platform recognize them, but through a much more controlled process than allowing user sign up.
cycuS 20 on at

Like
a
(0)

Report
Copy link

Link copied!

Hi,
Thanks for a reply.
I am a bit concerned that disabling viral consents will not work for this, because I have tested it. On my Developer tenant I actually blocked both consents and my test user was still able to assign developer license.

I am thinking of your second message. To disable Ad-hoc subscriptions?

Can you tell me with 100% confidence that this would prevent users from starting Developer TRIAL? Because I am 95% sure. I think I am going to test it on my tenant as well.

For Viral/Internal plans. We don't want prevent users from assigning TRIAL licenses because it doesn't bother us. Developer environments are the problem because it violates our Governance rules, so we just need to block this.

Thanks for replies again 🙂
Community Power Pla... Microsoft Employee on at

Like
a
(0)

Report
Copy link

Link copied!

Hey!

I'm not sure if you have seen this before:

Option 1
Users can sign up by going to powerapps.microsoft.com, selecting Try free, and then completing the sign-up process for Power Apps.
.....
As a global admin, you can control your users' ability to sign up for Power Apps trial with option 1. You do this by enabling or disabling self-service sign-up. If you want to disable all self-service sign-ups, use Azure AD PowerShell commands to change the AllowAdHocSubscriptions setting. This option turns off self-service sign-up for all Microsoft cloud-based apps and services.
Manage licenses in your organization - Power Platform | Microsoft Learn

if not, can you try to change that setting?
power-guy 17 on at

Like
a
(0)

Report
Copy link

Link copied!

AllowAdhocSubscriptions will stop the Dev plans, but just note, it’s for all of Azure AD trial licenses so it will stop other trials from self sign up too. I haven’t found a way to just disable dev plans in power platform without stopping other trials 😟

hope you find the mix of setting that work for you in your test tenant!