https://alven.tech/tags/conditional-access/ Recent content in Conditional Access on AlvenTech Hugo -- gohugo.io en-US © 2026 Stein-Erik Alvestad Tue, 10 Nov 2026 00:00:00 +0000 https://alven.tech/posts/2026-11-10-agent365-approval-lifecycle/ Tue, 10 Nov 2026 00:00:00 +0000 https://alven.tech/posts/2026-11-10-agent365-approval-lifecycle/ Conditional Access for agents only has one grant: Block, so the pattern is an allow-list driven by a custom security attribute. Microsoft documents the mechanism. What I couldn’t find was the lifecycle around it: who moves an agent from New to IT_Approved, what takes it back, and how it relates to the other approvals and lifecycle features in Entra and Agent 365. Here’s the map I drew, the approval lifecycle behind the attribute, and how I built it in my lab.