Applies to Product - Microsoft Dataverse
What’s happening?
The customer is experiencing an issue where a specific cloud app is missing from the 'cloud apps' search in Conditional Access policies, preventing them from restricting user access to the intended application.
Reason:
This arises because when a Conditional Access Policy (CAP) is created to block all cloud apps, it inadvertently blocks access to all applications that call Microsoft Graph, not just the intended app. This is by design.
Resolution:
- Create a CAP that specifically excludes the intended app (e.g., Dataverse) rather than blocking all apps, to allow users to sign in to the desired application while restricting access to others.
- For further details on Conditional Access and its configuration, refer to the documentation available at: https://learn.microsoft.com/en-us/entra/identity/conditional-access/concept-conditional-access-cloud-apps.