Running some applications may depend on downstream services such as:
graph.microsoft.com: to check if a tenant has access rights to the application
graph.windows.net: to get user regional information so the application can offer the most relevant educational resource from user’s region.
musicart.xboxlive.com: to get the thumbnail and preview images of all
To help end users, a school IT Admin may want to configure their school firewall policy. Use these trusted URLs and IP addresses ranges for optimization.
For additional URLs and IP addresses, please refer to the list specific to O365.