In October 2019, Microsoft announced a plan to roll out self-service purchase capability for Power Platform products. It does mean that end users can pay and buy licenses themselves without requiring any administrative approvals. Microsoft received many requests from the community to reverse the decision as it leads to compliance and governance-related issues.
https://office365.uservoice.com/forums/273493-office-365-admin/suggestions/38878723-ability-to-block-self-service-purchase-capabilitie
Microsoft listened to the feedback and published a way to block self-service purchase capability using PowerShell. However, the self-service purchase capability is enabled by default; hence administrator needs to execute a few PowerShell commands mandatorily to block this capability.
Here are the steps to block self-service purchase capability. One needs to have either Global administrator or Billing administrator permissions to execute the following commands.
Step 1
Run PowerShell as administrator.
Step 2
Run the following command to install module named MSCommerce
Install-Module -Name MSCommerce
Step 3
Run the following command to connect to MSCommerce
Connect-MSCommerce
Step 4
Run the following command and you see that Self-Service Purchase capability is enabled by default.
Get-MSCommercePolicies | fl
Step 5
To view product level policy setting, run the following command.
Get-MSCommerceProductPolicies -PolicyId AllowSelfServicePurchase
Step 6
You can disable the self-service purchase capability at product level with the following PowerShell command. Just replace <Product ID> with the respective ProductId of the Product from the above PowerShell output.
Update-MSCommerceProductPolicy -PolicyId AllowSelfServicePurchase -ProductId <Product ID> -Enabled $False
For an example, to disable the feature for Power Apps, as the ProductId associated with Power Apps is CFQ7TTC0KP0P in the above PowerShell output, the command to disable features for Power Apps will look like this after the replacement.
Update-MSCommerceProductPolicy -PolicyId AllowSelfServicePurchase -ProductId CFQ7TTC0KP0P -Enabled $False
Execute the above command to disable the feature for Power Apps.
Step 7
Now, to view updated policy values at product level, run the following command again and you see policy for Power Apps is disabled.
Step 8
You can also disable policy for the products Power Automate and Power BI Pro in similar way.
Power BI Pro
Update-MSCommerceProductPolicy -PolicyId AllowSelfServicePurchase -ProductId CFQ7TTC0L3PB -Enabled $False
Power Automate
Update-MSCommerceProductPolicy -PolicyId AllowSelfServicePurchase -ProductId CFQ7TTC0KP0N -Enabled $False
To conclude, as the roll-out of Self-Service Purchase capability feature is hitting all tenants beginning in mid-January 2020, so all Office 365 administrators should be aware of the option to block the feature using PowerShell as described above.