M365 Governance: Disable self-service sign-up and purchasing

As an administrator in M365 you have lots of admin-centers and settings which you can configure. In M365 you can determin whether your users can make self-service purchases to get their own licence.

When should i disable it this option?

You may want to disable this option if

• your company has an procurement process in place to meet compliance and regulatory needs.
• You do not want that users can purchase a product from Microsoft, pay for it with credit card, and use it in your companies tenant

Products which offer self-service sign-up and purchasing

It is available for PowerPlatform (including PowerApps, PowerAutomate, PowerBI), MS Project, and Visio.

How to disable it?

You have to use Powershell for it.

Install-Module MSOnline
Connect-MSolCompanySettings
Set-MsolCompanySettings -AllowAdHocSubscriptions $false

You should also disable self-service purchase capabilities by product.

Install-Module -Name MSCommerce
Import-Module -Name MSCommerce
Connect-MSCommerce #sign-in with your global or billing administrator account when prompted
$products = Get-MSCommerceProductPolicies -PolicyId AllowSelfServicePurchase
foreach($product in $products) {
    Update-MSCommerceProductPolicy -PolicyId AllowSelfServicePurchase -ProductId ($product.ProductID) -Enabled $false
}