Block only Azure Portal using Conditional Access not the all management endpoints
We created conditional access policy to block sign-in to Azure management portal, and we are getting reports from users that are accessing Visual Studio subscriptions administrator portal that they are getting the error "Your sign-in was successful but you don't have permission to access this resource."? How can block sign in to https://portal.azure.com only? I don't want to block sign in to Visual Studio subscriptions administrator portal
We have a use case, where we want to block sign in to the Azure portal for All users except a group of users. And there are few users to whom we want to give access to the Visual Studio subscription administrator portal. How can we do it together block azure portal sign in and allow sign in for Visual Studio subscriptions administrator portal?