Microsoft Azure Active Directory-Conditional Access

There is a good article online about the conditional access;

You would need to sign up for Azure Active Directory Premium Plan 2 or may be 1:)-

Most of the below link is self explanatory;

https://docs.microsoft.com/en-us/azure/active-directory/active-directory-conditional-access-azure-portal

Go to conditional Access and Add a new item

Under Assignments:

Users and Groups: Added to all

Cloud App: Select Dynamics CRM Online (as they still call)

Conditions: I have only selected to Exclude All Trusted

Controls: Just "Block" access to "Cloud App (CRM in my case)" for "Users and Groups (I have selected)" excluding "Trusted IP Range that I have given Ip should be in CIDR notation

And all works seamless except Microsoft wants €5/User/Month to enable this feature....not sure if there is any cheaper way of getting this.