Self-Service purchases of Microsoft 365 products were a controversial addition to Microsoft 365 when it originally launched a few years back. Granting the ability to end users to purchase products outside of admin control or the existing subscription is great from a digital transformation and usability perspective, however, in highly secure and governed environments, presents a problem where IT may not be “Ready” to let a product out into the wild. Before launching products to users, there is usually an amount of configuration and governance that needs to be in place to ensure the usage of the product complies with organizational guidelines.

As noted in Microsoft Message Center notification MC245825, there are two new additions to the list of products eligible for self-service, the full list is detailed below:

Power Apps per user

Power Automate per user

Power Automate RPA

Power BI Premium (standalone)

Power BI Pro

Project Plan 1

Project Plan 3

Visio Plan 1

Visio Plan 2

While for some organizations, this is great news as it cuts down on admin overhead and billing processes, it can present a problem for organizations who have eager users and have not yet done the due diligence in configuration and governance.

For those organizations, the self-service functionality can be turned off on a per-application basis, allowing for a smoother rollout when configuration to protect the tenancy is in place.

This can be done using the MSCommerce PowerShell Module. The module can be installed using the below command:

Install-Module -Name MSCommerce

Once installed, simply connect to the service with:

Connect-MSCommerce

Once connected, check the product ID for the product you want to modify in the below table:

Product	ProductId
Power Apps per user	CFQ7TTC0KP0P
Power Automate per user	CFQ7TTC0KP0N
Power Automate RPA	CFQ7TTC0KXG6
Power BI Premium (standalone)	CFQ7TTC0KXG7
Power BI Pro	CFQ7TTC0L3PB
Project Plan 1	CFQ7TTC0KXND
Project Plan 3	CFQ7TTC0KXNC
Visio Plan 1	CFQ7TTC0KXN9
Visio Plan 2	CFQ7TTC0KXN8

and run the below command to get the current status of that product:

Get-MSCommerceProductPolicy -PolicyId AllowSelfServicePurchase -ProductId <ProductID>

Here we see the status of the product we queried:

To disable the product for self-service purchase, we can run the below command:

Update-MSCommerceProductPolicy -PolicyId AllowSelfServicePurchase -ProductId <ProductID> -Enabled $False

Import-Module -Name MSCommerce
Connect-MSCommerce #sign-in with your global or billing administrator account when prompted
$product = Get-MSCommerceProductPolicies -PolicyId AllowSelfServicePurchase | where {$_.ProductName -match 'Power Automate'}
Update-MSCommerceProductPolicy -PolicyId AllowSelfServicePurchase -ProductId $product.ProductID -Enabled $false

If we have already disabled previous products, keep in mind that these new additions will need to be disabled when they are added this month.