The ServiceAccounts-O365Cleanup policy is intended to restrict access to M365 for members of O365Cleanup-ServiceAccount-ConditionalAccess to certain IP's / IP ranges.
Assignments
User or workload identities
- Included - members of O365Cleanup-ServiceAccount-ConditionalAccess
- Excluded - members of Surface.Hub.Conditional.Access.Bypass.Group@austin.utexas.edu
Cloud apps or actions
- All cloud apps
Conditions
- Locations - ALL except 'chm584 - Work Computer','ex-p01/2.austin.utexas.edu'
- Client apps - all selected
Access controls
Grant
- Block access
Session
- 0 controls selected