Allow less restrictive access control policy for specific SPO sites
The ability to control access from unmanaged devices using the SharePoint Access Control functionality with Conditional Access is very useful.
However, the limitation that individual sites can only have more restrictive controls than the organisation level setting (as described in https://docs.microsoft.com/en-us/sharepoint/control-access-from-unmanaged-devices#block-or-limit-access-to-a-specific-sharepoint-site-or-onedrive) is frustrating.
It would be great if the organisation level setting could be set to restrict access from unmanaged devices but then defined sites that specifically need to be less restricted could be 'opened up' by reducing the restrictions.
We can do this at a user-level using Conditional Access exclusions but there's no way to apply an exclusion at a Site (or Site Collection) level (that I can see!).