What happen If i update our all organization internal network range in the Conditional access Named locations,

Question

I`m planning to update our all-organization internal network range in the Conditional access Named locations to allow access to only internal users to the Azure Resources.
When I update Network ranges at what level are these affected? (entre tenant or subscription wise)

Answer 1

All the dependent apps targeted for any conditional access policies with Named locations will be impacted.
Better to create an exception group , add them with no accounts on a safer side.
Just in case if any critical apps are still accessing from external locations then you can validate and add them to this exception list.