Quick start: a member AUP and guest terms

From download to the first acceptance in about fifteen minutes. Try it in a test tenant first, or with a pilot group.

1. Download AKC-AUP.exe and run it. Windows SmartScreen may warn the first time: choose More info, Run anyway.
2. Set up your tenant once, as a Cloud Application Administrator: Tools, Set up this tenant. See Before you start.
3. Sign in (top right) with your Conditional Access Administrator account.
4. Step 1, Check the tenant: AKC AUP checks the licence and your role, lists any Terms of Use and policies already there, and suggests your break-glass group. Choose Use this group on the right one, or search for it.
5. Step 2, Model: leave Separate member AUP and guest terms chosen.
6. Step 3, Documents: for the Member AUP, choose Choose… and pick your member PDF; for Guest terms, your guest PDF. The names in Entra and the titles people see are filled in; change them if you like.
7. Step 4, Acceptance: leave People must open the document before they can accept on and Accept again at Every 1 year.
8. Step 5, Who it applies to: change the policy-name prefix to fit your numbering (for example CA040) and choose Apply to the names. To pilot, switch All users off on the members policy and add a test group.
9. Step 6, Review and deploy: check every value. Leave both policies report-only, then Deploy.

AKC AUP creates the two Terms of Use, then the two policies, and saves a deployment record (File, Open the records folder).

Check the Report-only tab in a few sign-in logs for people in scope, then switch the policies on: in step 6, choose Change this deployment, switch them on, and Apply changes. People are asked to accept at their next sign-in. Who has accepted shows in Entra under Conditional Access, Terms of use.

Guests later?

Choose Members only, guests later in step 2 instead: one Terms of Use and one policy, with every guest and external user left out.