youtube image
From YouTube: PnP Shorts - Implementing Web Application Policy alternatives in SharePoint Online

Description

Web app policies are a concept that allows SharePoint administrators to either grant or deny permissions to users and groups for all sites under a web application. These permission grants and denies take preference over the permissions set at the sites in the web application and therefore are a mechanism typically used in scenarios like these:

- Grant a service account permissions to all the sites because that service account is used to run a background process that needs to manipulate the data in all sites
- Grant support team read-only access to all sites so the support engineer can walk through the site with the end user
- Deny users (e.g. after leaving the company) access to all content

Web application policies do not exist anymore in SharePoint Online and there’s no identical alternative implementation possible, however by using the existing SharePoint security model you can achieve similar results, which is the explained in this PnP Short video.

See also https://docs.microsoft.com/en-us/sharepoint/dev/solution-guidance/security-webapppolicies for more details.