Are others using conditional access policies to limit access to M365 services in GCC/GCC-H to specific IP addresses? We’ve been discussing whether or not we should restrict access to M365 to addresses that originate from our networks (e.g., managed endpoints on our internal network going through our controlled egress points or managed endpoints on VPN through our controlled egress points).