Recently Microsoft announced Self-service purchase capabilities for Power Platform products (Power BI, PowerApps, and Flow).
Self-service purchase capability arrives automatically and enabled by default. Due to this change, individuals within the organization can buy subscriptions directly without contacting their IT department. Self-service purchasers are responsible for their own billing information, subscriptions, and license management.
In some cases, this change might be useful since the end-user doesn’t need to wait weeks/months to get approval/license from the IT department.
Through Self-service purchase, IT administrators lose their control over who could purchase and install Office 365. This also creates challenges in controlling data sprawling, compliance, and protection issues. Since Self-service purchase encourages Shadow IT, IT administrators are not gratified due to this change.
The self-service purchase capabilities will start rollout from January 14, 2020. But Microsoft is providing the setting to toggle self-service purchase before it rolls out, as most Admins would want to disable it 😉. So, it’s good to disable the self-service purchase capabilities now, if you decide to turn off this setting for your organization.
Block Self-service Purchase for Power Platform Product using PowerShell:
Currently, there is no user interface solution to disable Self-service purchase in Office 365. You need to use PowerShell to block Self-service purchase.
Microsoft has created a PowerShell module ‘MSCommerce‘ particularly for this. At present, we need to disable self-service purchases for each power product separately. Microsoft is yet to release a global switch to turn off.
If Microsoft releases any new power product in future, then we might need to disable the self-service purchase capability!
The MSCommerce PowerShell module has the following capabilities currently.
- View the Self-service purchase status for your tenant.
- View the list of power products along with its self-service purchase status.
- Modify the self-service purchase option for each power products.
Install MSCommerce PowerShell Module:
Microsoft recommends using the PowerShell module in a Windows 10 device.
Note: To execute the cmdlet you need to be either Global or Billing admin.
1. Verify Self-service Purchase Status:
2. View the list of Power Products and its Self-service Purchase Status:
3. Change the Self-Service Purchase Status for Power Products:
Currently Microsoft offers 3 products under power platform. If you want to disable the self-service purchase for all three platform you need to execute the cmdlet for each product.
To disable self-service purchase for Power Apps
To disable self-service purchase for Power Automate
To disable self-service purchase for Power BI
Script to Disable Self-service Purchase for All Power Products.
If all you wanted to disable the self-service purchase option for all power products currently available, then just run the code below.
More information about MSCommerce PowerShell module can be found here.
This error is due to an older version of Transport Layer Security (TLS). Please use TLS 1.2 or greater.
Upgrade to TLS 1.2: https://docs.microsoft.com/configmgr/core/plan-design/security/enable-tls-1-2