Way To Block Power Platform Self Service Purchase Feature

In October 2019, Microsoft announced a plan to roll out self-service purchase capability for Power Platform products. It does mean that end users can pay and buy licenses themselves without requiring any administrative approvals. Microsoft received many requests from the community to reverse the decision as it leads to compliance and governance-related issues.
 
https://office365.uservoice.com/forums/273493-office-365-admin/suggestions/38878723-ability-to-block-self-service-purchase-capabilitie
 
Microsoft listened to the feedback and published a way to block self-service purchase capability using PowerShell. However, the self-service purchase capability is enabled by default; hence administrator needs to execute a few PowerShell commands mandatorily to block this capability.
 
Here are the steps to block self-service purchase capability. One needs to have either Global administrator or Billing administrator permissions to execute the following commands.
 
Step 1
 
Run PowerShell as administrator.
 
Step 2
 
Run the following command to install module named MSCommerce

Install-Module -Name MSCommerce
 
Way To Block Power Platform Self Service Purchase Feature
 
Step 3
 
Run the following command to connect to MSCommerce
 
Connect-MSCommerce
 
Way To Block Power Platform Self Service Purchase Feature
Way To Block Power Platform Self Service Purchase Feature
 
Step 4
 
Run the following command and you see that Self-Service Purchase capability is enabled by default.
 
Get-MSCommercePolicies | fl
 
Way To Block Power Platform Self Service Purchase Feature
 
Step 5
 
To view product level policy setting, run the following command.
 
Get-MSCommerceProductPolicies -PolicyId AllowSelfServicePurchase
 
Way To Block Power Platform Self Service Purchase Feature
 
Step 6
 
You can disable the self-service purchase capability at product level with the following PowerShell command. Just replace <Product ID> with the respective ProductId of the Product from the above PowerShell output.
 
Update-MSCommerceProductPolicy -PolicyId AllowSelfServicePurchase -ProductId <Product ID> -Enabled $False
 
For an example, to disable the feature for Power Apps, as the ProductId associated with Power Apps is CFQ7TTC0KP0P in the above PowerShell output, the command to disable features for Power Apps will look like this after the replacement.
 
Update-MSCommerceProductPolicy -PolicyId AllowSelfServicePurchase -ProductId CFQ7TTC0KP0P -Enabled $False
 
Execute the above command to disable the feature for Power Apps.
 
Way To Block Power Platform Self Service Purchase Feature
 
Step 7
 
Now, to view updated policy values at product level, run the following command again and you see policy for Power Apps is disabled.
 
Way To Block Power Platform Self Service Purchase Feature
 
Step 8
 
You can also disable policy for the products Power Automate and Power BI Pro in similar way.
 
Power BI Pro
 
Update-MSCommerceProductPolicy -PolicyId AllowSelfServicePurchase -ProductId CFQ7TTC0L3PB -Enabled $False
 
Power Automate
 
Update-MSCommerceProductPolicy -PolicyId AllowSelfServicePurchase -ProductId CFQ7TTC0KP0N -Enabled $False
 
To conclude, as the roll-out of Self-Service Purchase capability feature is hitting all tenants beginning in  mid-January 2020, so all Office 365 administrators should be aware of the option to block the feature using PowerShell as described above.