Control Access to Azure AD for Users in Certain Countries
Azure Active Directory (AD) allows managing connections so that users from certain countries can’t access your services. However, sometimes, VIPs can travel to one of such countries. To address that, you can deny access to all users in a country, allow connection from that country to certain users, or establish an approval workflow to allow travel with an access package.
Read the article by Romain Serre, a Microsoft MVP, on how to manage connections to your Azure AD for users located in other countries to enhance your desired security.