A company uses Dynamics 365 Supply Chain Management. The company has offices in several geographic regions. Users must only be allowed to access the system from IP addresses that are associated with t

Session management controls session timeout durations and cookie behavior, not the network addresses from which users are permitted to authenticate.

Azure Active Directory Conditional Access allows administrators to define named locations based on IP address ranges corresponding to the company's office regions. Policies can then be enforced to block any authentication attempt that originates from an IP address outside those approved locations before the user reaches the Dynamics 365 application.

Extensible Data Security (XDS) policies restrict which data records a user can view within the application based on security policies, not the network location from which they connect.

Security policies in Dynamics 365 define row-level data access rules tied to user context, not IP address or network-based authentication restrictions.

Assigning user roles controls which features and data a user can access inside the application but does not restrict the network locations from which authentication is permitted.