Catch
Target: All Users
Exclude All Personas
Persona X
Target: Persona Group X
Perona X Policy Set / Blueprint
Base protection based on https://github.com/AlexFilipin/ConditionalAccess/wiki/Strong-authentication-maturity
Limit register security information
Block Legacy Auth
...
Persistent session
Sign-in frequency
...
Session controls
...
Context tightening / exceptions (e.g. DLP controls)