Forum Discussion
Solved
BYOD / Corp Conditional Access Question
Hi All Tricky scenario here and I will try my best to explain. Conditional Access Policy for BYOD / Personal devices = Require approved app Conditional Access Policy for Corp devices = Requi...
the thing is that at the moment CA supports only user based groups, so you won't be able to target separate policies based on device type.
I was told that it's something in plan, but no ETA.
You should be able to do this by using Dynamic Device Groups and using a rule like (device.deviceOwnership -eq "Company") for your Corporate devices. In general, the more restrictive policy will take precedence.