Is there an overview which Microsoft apps support or do not support the device compliance state CA option. As an example PowerApps does not submit the deviceId and therefore the CA policy blocks the access although the device is in a compliant state.
