Conditional access can be granted via an Azure Active Directory premium license. Intune's mobile device compliance and mobile application management (MAM) solutions work with Azure so that you can allow or block access to organization resources based on a device or app's characteristics and behaviors. Any compliance policy can be used as a condition in a conditional access policy.

In the following sections, we'll look at what we can when we're designing a conditional access policy, how to create a policy, and how to manage them once they've been created.