review conditional access exclusions