Manage Host pool access based on Entra ID Risky user/sign-in status

Entra ID Risky user/sign-in status (in Entra ID P2), enables Conditional Access to be used to change access based on the risk level (e.g. force MFA, force password change, block access). This status could be used to add/remove users from Entra ID groups assigned to host pools. 

For example, on risk status change, the group membership could be modified to only grant access to a secure host pool (limited apps and users, network segmented etc.).

This would enable customers to have more options for managing resource access based on end-user risk status without locking them out of AVD access completely.