Microsoft Surface Hub 2 SmCamera - Manual (Page 366)

If the Azure sign-in logs and "What If" tool don't reveal any Conditional Access policies
affecting the account, it's recommended to manually review every Conditional Access
policy to ensure the Surface Hub device account isn't affected.
Navigate to your tenant's Conditional Access policies within Endpoint Manager. To
access this page, ensure the user has the correct
role assigned.
1. Sign into Microsoft Intune admin center
2. Go to Devices > Conditional Access
Review Conditional Access Policies
Step 1