Microsoft announced a major security for Microsoft Teams administrators, introducing a new feature that enables bulk management of certified Microsoft 365 (M365) apps through audit rules.
See also: Black Basta: Former members return with Microsoft Teams phishing & Python Scripts
This new feature, with Microsoft 365 Roadmap ID 485712, represents a significant advancement in application governance and security management within the Teams ecosystem. It is expected to be globally available in mid-August 2025, with full deployment expected by early September 2025. This automated management system introduces advanced control tools through the Teams Admin Center, specifically in the organization-wide application settings under the “Application Management” section.
The new feature leverages an intelligent filtering mechanism that automatically evaluates certified Microsoft 365 apps based on administrator-defined criteria, such as publisher verification, permission fields, and security compliance standards.
The system operates through a central dashboard, accessible from the path: Application Management > Actions > Organization App Settings > Microsoft 365 Certified Apps, where administrators can configure the "All Apps Available" option, which will be enabled by default after the feature is released.
See also: Microsoft Teams: Phishing alerts coming to everyone in February
This is a significant change from the previous model for third-party applications in the tenant, where bulk management capabilities were limited.
The platform introduces advanced customization options through the “Customize Availability” feature, enabling administrators to apply granular controls based on specific API permissions, data access levels, and publisher authentication. This layered approach ensures that only applications that meet strict security requirements gain access to organizational resources.
The system's rules-based architecture automatically validates applications against predefined security policies, checking Microsoft 365 certification status, compliance with OAuth scopes , and security settings defined at the tenant level.
See also: Microsoft Teams now allows message migration to Google Chat
A related and important point that emerges from the above is how this new feature strengthens app governance in Microsoft 365 environments. In practice, this means that an organization can now have centralized, consistent, and secure control over what is allowed in Teams and its Microsoft 365 ecosystem — something critical in environments with increased compliance requirements, such as the financial or medical sectors.
Source: cybersecuritynews
