What should a retail company configure to restrict administrative access to specific time windows?

Conditional Access Policies in Azure AD allow you to enforce granular control over access to resources. By configuring a time-based condition, the retail company can restrict administrative access to specific time windows, enhancing security by limiting the exposure of privileged accounts. Azure Policy is used for enforcing organizational standards and assessing compliance, not for dynamic access control based on time. Azure Automation is for automating tasks and processes, not for real-time access restriction. Azure Monitor Logs is for collecting and analyzing log data, not for enforcing access policies.