The Office cloud policy service
The Microsoft 365 Apps admin center (https://config.office.com) provides cloud-based policy management of Microsoft 365 enterprise apps. Policies deployed from the Office cloud policy (OCP) service will work on devices that are managed and unmanaged, so basically, all devices that users in your Office 365 organization are logging in to, both corporate and personally owned.
When a user signs into Microsoft 365 Apps for enterprise on a device, the policy settings roam to that device. You can also enforce some policy settings for Office web apps, iOS, macOS, and Android.
The Office cloud policy service includes many of the same user-based policy settings that are available in Group Policy or in Microsoft Intune. Conflict handling between the OCP service and policy settings from Group Policy Object (GPO) or Microsoft Intune is done so that Microsoft Intune or GPO will always win. A user can be a member of multiple Azure Active Directory groups with...