What Is Conditional Access?

Conditional access is the practice of attaching conditions to a permission so it applies only when those conditions are met. In CI/CD this can mean a role is assumable only from a particular branch, or a secret is readable only in a named environment. The conditions are evaluated at request time against token claims or context.

Why it matters

Static grants give the same access regardless of context, which is often broader than intended. Conditional rules tighten access to exactly the situations where it is appropriate.

Related guides