Secure Internet and SaaS Access (ZIA)
Revoking and Banning Apps
Depending on the platform (i.e., Google or Microsoft), you can revoke or ban an app for all users in your organization.
- Revoke (supported by Google): Removes all permissions granted for the app. This does not prevent users from installing the app and giving consent in the future. You can use the app classification and policies to prevent users from reinstalling the app.
- Ban (supported by Microsoft): Blocks access to the app, preventing users from using the app in the future.
You can also revoke an app for individual users. Banning an app for individual users is not currently supported.
- Revoke or Ban an App for All Users
You can revoke or ban an app for all users in the App Inventory or the App Panel header.
- Revoke or Ban an App in the App Inventory
- In the left-side navigation, go to Inventory.
- In the App Inventory, go to the Automated Workflow column and the app you want to revoke or ban for all users.
- In the drop-down menu, click Revoked/Banned.
A summary of the app you want to revoke or ban appears.
- (Optional) If the app has a risk finding, mark it appropriately (e.g., Dismissed).
- Click Revoke/Ban.
You can update the Automated Workflow of multiple apps at the same time. To learn more, see Taking Bulk Actions on Apps.
Close - Revoke or Ban an App in the App Panel Header
- Select the app you want to revoke or ban for all users.
The App Panel opens.
- In the Automated Workflow drop-down menu, located in the App Panel header, click Revoked/Banned.
A summary of the app you want to revoke or ban appears.
- (Optional) If the app has a risk finding, mark it appropriately (e.g., Dismissed).
- Click Revoke/Ban.
- Revoke or Ban an App in the App Inventory
- Revoke an App for Individual Users
You can revoke an app for individual users on the Access tab in the App Panel or in the User Panel.
From the Access tab in the App Panel:
- Select the app you want to revoke for a user.
The App Panel opens.
- Click the Access tab.
- Under Authorized User Accounts, click the ellipsis menu next to the user, then click Revoke.
From the Access Tab in the User Panel:
- Select the user.
The User Panel opens.
- On the Access tab, click the ellipsis menu next to the app, then click Revoke.
After you ban or revoke an application, its status changes in 3rd-Party App Governance. To learn more about application status, see App Panel Header.