This article would be useful for IT administrators; the article shows how to disable Microsoft Stream for some or all users in your organization.

Note:

You need to be in admin role to perform operations described in this article for your tenant.

Overview

When a first user from any organization signs-up for Microsoft Stream using their corporate credentials, Microsoft Stream Service is registered as an application in the organization's tenant and automatically assign the license to the user who signed up. At this point, there are additional licenses available for the IT admin to assign to other users in the organization without them going through the sign-up process.

However, there are situations in which IT admins would want to disable employees from using Microsoft Stream (for example, in cases where employees are already using O365 Video or if Microsoft Stream has not been approved by your organization).

How to turn OFF Microsoft Stream for everyone

  • As a tenant admin, log in to the Azure portal or the classic Azure portal with an administrator account.
  • Navigate to the AAD section and choose the directory you are using for the application.
  • Click on the APPLICATIONS tab.
  • Select the Microsoft Stream Service application from the list of applications or search by the guid "2634dd23-5e5a-431c-81ca-11710d9079f4" for Microsoft Stream Service.

Block

  • Click the CONFIGURE tab.
  • Change the User Assignment Required to Access App toggle to Yes.
  • Click the Save button at the bottom of the screen.
  • At this point, as an admin, you have essentially blocked access to all users for get access to Microsoft Stream Service.

Block

Turn ON Microsoft Stream for selected people

If you have turned on "User Assignment required to access app" flag for Microsoft Stream Service, you can selectively assign users to have access to Microsoft Stream for a POC before you enable for all users.

  • As a tenant admin, navigate to the USERS tab for Microsoft Stream Service in AAD.
  • Select a user who you want to have access to Microsoft Stream.
  • Click Assign at the bottom of the screen and confirm.
  • At this point, the user who you have selected will have access to Microsoft Stream and will be able to log-in.

Turn ON Microsoft Stream for all users

Once you are ready to give access to everyone in the organization, you can do either of the 2 things:

  • Select all users in the USERS tab for Microsoft Stream Service in AAD and click Assign.
  • Turn OFF the User Assignment required to access the application.

Once you have turned off Microsoft Stream, when employees in your organization try to sign-in, they will see an error page like the one below.

Block

At this point, you can selectively assign the license to that user to enable the user to explore Microsoft Stream or simply deny the request.

There is another scenario which I do want to call out for awareness for all IT admins. If there are employees in your organization who have signed up for Microsoft Stream and then you block all ad-hoc subscriptions, new users who try to sign-up for Microsoft Stream (and other viral services) will not be able to sign-up and will see the following error. However, for the users who had earlier signed-up, will still be able to sign-in and continue to use Microsoft Stream. To block sign-in, you can either remove the licenses for each of these users or turn OFF Microsoft Stream as discussed in this article.

Block

See also

Enabling Microsoft Stream for everyone in the organization

Understand privacy settings

Get started