Does Azure Management app cover Azure Portal?

[indepth15]

I'm a bit confused of Azure Management app when using with Conditional Access in AAD. If I add it to cloud app, and block the access to is (in Grant control) does it actually block my access to Azure Portal? I've tested with a few users but this seems not to be the case.

---

Document Details

⚠ Do not edit this section. It is required for docs.microsoft.com ➟ GitHub issue linking.

• ID: 221733cf-3951-3fb4-12cc-486ef43d8d16
• Version Independent ID: d1b33f3f-9b93-b06e-bb4a-673205833fd5
• Content: Manage access to Azure management with conditional access in Azure Active Directory
• Content Source: articles/role-based-access-control/conditional-access-azure-management.md
• Service: role-based-access-control
• GitHub Login: @rolyon
• Microsoft Alias: rolyon

[femsulu]

@thuansoldier Thanks for the feedback. We are actively investigating and will get back to you soon.

[femsulu]

@thuansoldier No this will not block access to portal. What is your expected outcome. to block access to Azure Portal?

[indepth15]

@femsulu Yes I'd expect to block access to Azure Portal using Conditional Access? Would it be possible?

[femsulu]

@thuansoldier sorry for the delay in response. while conditional access policy can be used in its most restrictive form to block authorized users from accessing Azure management portal, it may be an overkill for your scenario. will like to better understand your business policy that would require using conditional access to block access to the portal. Are you trying to base this on some geo location? e.g. block access to portal if authorized user is attempting to access the portal from an unsecured internet café in a third-world country? Also note that Using conditional access requires an Azure AD Premium license.

[femsulu]

Hello @thuansoldier, happy to carry on this conversation via our community email channel so please if you have any followup, don't hesitate to send a mail to AzCommunity@microsoft.com and include a link to this GitHub issue for context. Thanks for being an active member of the community.

[bsocca]

Hi,
I have the same question than @thuansoldier.
Can I restrict the access to Azure Portal and Azure REST API using the Azure Management app and configuring the Conditional Access in AAD ?
Thx

[indepth15]

@bsocca yes all Azure management endpoints, including classic Azure portal, Azure portal, Azure Resource Manager provider, classic Service Management APIs, and Azure PowerShell.