Use a security group to control %BRAND_ONEDRIVE% and %BRAND_SHAREPOINT% access and for Mobile Device Management for Office ...