The initial need comes from the request to provide the dynamics app for outlook within the mobile outlook.

Currently it is not possible to scope a conditional access policy for a specific power app from a dynamics CRM instance. Caused by this we could only handle the whole power apps of a tenant in such a rule.

This is from security perspectives a poor approach.

We suggest it should be possible to create a conditional access policy for a specific power app (from a dynamics CRM). So that we can define the security more precisely.