Share via


Block unauthorized self-service agent sign-ups

Note

Graph PowerShell is required. Azure PowerShell and MSOnline have been deprecated. Find Azure AD and MSOnline cmdlets in Microsoft Graph PowerShell

As an administrator, you can prevent users in your organization from signing up for free trials when they don't have administrative permission. To block unauthorized (viral) self-service sign-ups at a company-wide level, perform these steps:

  1. Block new users from signing up for viral trial subscriptions (Copilot Studio).

    1. In Graph PowerShell, in the Update-MgPolicyAuthorizationPolicy cmdlet, set the AllowedToSignUpEmailBasedSubscriptions parameter to False.

         Set-Update-MgPolicyAuthorizationPolicy -AllowedToSignUpEmailBasedSubscriptions $False
      

      For more information, see Graph PowerShell.

  2. Remove existing users from viral license assignment, using either the Microsoft 365 admin center or PowerShell.

    • Microsoft 365 admin center: Sign in to the Microsoft 365 portal and unassign in bulk.

      1. Sign in at admin.cloud.microsoft and go to the Billing > Licenses page.

      2. Select a product.

      3. Select the users for whom you want to unassign licenses.

      4. Select Unassign licenses.

      5. In the Unassign licenses box, select Unassign.