Conditional Access App Control and session policies
How Defender for Cloud Apps takes over a browser session from Entra Conditional Access, through the mcas.ms reverse proxy or Edge for Business in-browser protection, and how access and session policies block downloads, uploads, copy, paste and print on unmanaged devices.