Conditional Access policy to disable Azure Management is effecting PowerApps

Hi all,

We have a conditional access policy which is for stopping all the users to access Azure portal and PowerShell. We made this policy using "Microsoft Azure Management" Cloud App option.

Now we are facing this problem where all the user in our tenant can no longer have access to PowerApps. 

When we exclude the PowerApp in this policy, PowerApps is still not accessible. However, if we exclude the any user from this policy, then the user can access PowerApps - but the downside of this workaround is that this user can access PowerShell and Azure portal.

Any suggestion about this?