+The **MSCommerce** PowerShell module is available in the [PowerShell Gallery](https://aka.ms/allowselfservicepurchase-powershell-gallery). The module includes a **PolicyID** parameter value for **AllowSelfServicePurchase** that lets you control whether users in your organization can make self-service purchases of Microsoft or select third-party offers.

+You can also manage **AllowSelfServicePurchase** settings in the Microsoft 365 admin center. For more information, see [Manage self-service purchases and trials (for admins)](manage-self-service-purchases-admins.md).

+- View the default state of the **AllowSelfServicePurchase** parameter value—whether it's enabled, disabled, or allows trials without a payment method

+This command connects the current PowerShell session to a Microsoft Entra tenant. The command prompts you for a username and password for the tenant you want to connect to. If multifactor authentication is enabled for your credentials, you use the interactive option to sign in.

+To view a list of all available self-service purchase third-party offer types and the status of each, run the following command:

+| Offer Type| ID |

+To get the policy setting for a specific third-party offer type, run the following command:

+This error might be due to an older version of Transport Layer Security (TLS). When you connect to this service, you must use TLS 1.2 or greater

+## Allow or block self-service purchases and trials

+You can allow or block self-service purchases and trials for users in your organization in two ways:

+1. [By using the Microsoft 365 admin center](#use-the-microsoft-365-admin-center-to-allow-or-block-self-service-purchases-and-trials).

+2. [By using the MSCommerce PowerShell module](#use-the-mscommerce-powershell-module-to-manage-self-service-purchases-and-trials).

+Both methods let you do the following tasks:

+- View a list of applicable products and their statuses.

+- View or modify the current setting for a specific product.

+### Use the Microsoft 365 admin center to allow or block self-service purchases and trials

+> [!NOTE]

+> You must be a Global Administrator to do the following steps.

+You can use the Microsoft 365 admin center to manage self-service purchases and trials for users in your organization.

+1. In the Microsoft 365 admin center, so to the **Settings** > <a href="https://go.microsoft.com/fwlink/p/?linkid=2053743" target="_blank">Org settings</a> page.

+2. On the **Services** tab of the **Org settings** page, select **Self-service trials and purchases**.

+3. The **Self-service trials and purchases** page lists the products that are eligible for self-service, and shows their current self-service setting.

+4. To manage the settings for a specific product, select the product name. A panel opens and shows the current setting for the product you selected.

+5. To change the setting for the product, select **Allow**, **Allow for trials only**, or **Do not allow**.

+6. Select **Save changes**.

+### Use the MSCommerce PowerShell module to manage self-service purchases and trials

+The **MSCommerce** PowerShell module includes a **PolicyID** parameter value for **AllowSelfServicePurchase**. This parameter lets you control whether users in your organization can make purchases or start trials, and for which products. The module lets you do the same tasks available in the Microsoft 365 admin center, only from the command line. In addition, the module lets you view the default state of the **AllowSelfServicePurchase** parameter value for each product.

+3. To complete your purchase, complete the remaining steps.

+5. Assign licenses to everyone who has a license in the other subscription. For instructions, see [Assign licenses to users](../../admin/manage/assign-licenses-to-users.md).

+> Network connectivity in the Admin Center supports tenants in WW Commercial and China (Operated by 21Vianet, released on 2024-09-23), but not GCC Moderate, GCC High, or DoD.

+Microsoft 365 Lighthouse provides visibility into all the users across your managed tenants that have been inactive for over six months. Inactive accounts may present security risks and tie up unused licenses. From the **Inactive users** tab on the **Account management** page, you can track and clean up inactive accounts.

+Lighthouse uses sign-in activity to detect inactive user accounts. The **Inactive users** tab shows up to 500 inactive accounts for each tenant.

+1. In the left navigation pane in <a href="https://go.microsoft.com/fwlink/p/?linkid=2168110" target="_blank">Lighthouse</a>, select **Users** > **Account management**.

+2. On the **Account management** page, select the **Inactive users** tab, and then set the filters to show the desired result.

+5. Once you determine that a user account is no longer needed, you can delete or block the account. At a minimum, you should block the user account to reduce security risks. From the user details pane, select **Block sign-in** or **Delete user**.

+1. In the left navigation pane in <a href="https://go.microsoft.com/fwlink/p/?linkid=2168110" target="_blank">Lighthouse</a>, select **Users** > **Account management**.

+2. On the **Account management** page, select the **Inactive users** tab, and then expand any tenant in the list to see a list of inactive users within the tenant.

+3. Select the users you want to block, and then select **Block sign-in**.

+4. In the **Manage sign-in status** pane, select **Block users from signing in**.

+5. Select **Save**.

+To help you manage your tenant list in Microsoft 365 Lighthouse, you can apply custom tags to your tenants. These tags can be used to organize your tenants and can also help you filter the existing views and insights available to relevant sets of tenants. You can manage your tags from the **Tenants** page. Once tags are created and assigned, you can go to any page in Lighthouse that has a Tenants filter and use it to filter the data based on a tag.

+To assign a tag to multiple tenants, select the checkbox next to each tenant in the list that you want to tag, select **Assign Tags**, and then select a tag from the list.

+2. From the list of tenants, select the three dots (more actions) next to the tenant that has a tag you want to remove, and then select **Tags**.

+To remove a tag from multiple tenants, select the checkbox next to each tenant in the list that has a tag you want to remove, select **Assign Tags**, and then select a checked tag from the list.

+After you create and assign tags, you can use those tags to filter your tenants. Go to any page in Lighthouse that has a Tenants filter, select the filter, and then enter a tag to filter by or browse tags and select one or more tags from the list. You can also create new tags to support specific views based on each page.

+To view audit logs, you must hold one of the following roles:

+- Microsoft Entra Global Administrator in your partner tenant

+- Partner Center Admin agent

+2. Select one of the following tabs to view specific logs: **Audit logs**, **Graph logs**, **Directory logs**, **Sign-in logs**.

+If you can't sign in to Lighthouse, you can use the [Microsoft Service Health Status](https://status.cloud.microsoft/) page to check for known issues preventing you from logging in to your partner tenant. Also, sign up to follow [@MSFT365status](https://twitter.com/MSFT365Status) on Twitter to see information on specific service incidents.

+Loop components created outside of Loop are stored in the OneDrive of the person who created the component, or if created in a place with shared storage like a Teams channel, they are stored in the SharePoint folder for that channel. When stored in OneDrive, if that user leaves the organization, the standard OneDrive IT policy is applied. When stored in SharePoint, the standard SharePoint IT policy is applied.