Restrict access to Microsoft apps in a similar way as this can be done for google workspace in the General section of the Default Rules:

Allowed Google apps domains.

Add:

Allowed Microsoft apps domains.