Only want to grant limited BYOD access to the resources.

Question

Hi,

I want to use conditional access to allow access only to organization-managed devices (Intune or Hybrid AAD join), and then allow additional access for BYOD only to the laptops or PCs authorized by the IT administrator. We have P2 licenses.

1, what options do we have to achieve?

2, what is the best way to do this?

Answer 1

Hello @Taka !

For the first it is quite clear

The conditional access policy that needs Compliant Devices is the solution

Now for the Second one , it depends , What are the autorization criteria ?

CA have the option for Filters as seen below, you can apply a specific Extension attribute for example !

I hope this helps!

Kindly mark the answer as Accepted and Upvote in case it helped!

Regards