Session Control
Conditional Access App Control provides real-time monitoring and control of user sessions in cloud applications.
Session Policies
| Policy Type | Description |
|---|---|
| Monitor only | Log all activity without blocking |
| Block downloads | Prevent file downloads on unmanaged devices |
| Protect downloads | Apply encryption to downloaded files |
| Block upload | Prevent upload of sensitive content |
| Block copy/paste | Prevent clipboard operations |
Configuration
- Select target apps from the Cloud App catalog
- Define session conditions (device state, user risk, location)
- Choose control actions for matching sessions
- Set monitoring and alerting preferences
Use Cases
- Block downloads on unmanaged personal devices
- Watermark documents viewed in browser sessions
- Prevent copy/paste of sensitive data to unmanaged apps
- Monitor high-risk user sessions in real-time
API Reference
GET /api/security/session-control/policies— List policiesGET /api/security/session-control/sessions— Active sessions
Last updated on