A company uses Microsoft Power Platform and Dynamics 365 Field Service. External workers deliver onsite service to customer locations by using the Field Service (Dynamics 365) mobile app. You need…

Azure Conditional Access policies allow administrators to enforce access decisions based on various conditions, including user location (IP ranges), device state, and application, making it the ideal solution for restricting app usage to specific locations. By configuring a location-based condition, access to the Field Service app can be granted only when users are connecting from approved IP addresses or ranges.

Azure role-based access control (RBAC) manages what users can do within resources (permissions), not where they can connect from.

Azure Active Directory security groups are used to group users for easier permission management, but they do not enforce location-based access restrictions on their own.

Azure multi-factor authentication (MFA) adds an extra layer of security by requiring multiple verification methods, but it doesn't restrict access based on the user's geographical location.