All clients

Compare any report across every client you look after.

Report

Every policy in plain words, enforced ones first.

Client	Policy	State	Applies to	Except	Conditions	Requires
Contoso Legal LLP	CA001 — Admins: Require phishing-resistant MFA	On	11 admin roles Global Administrator Security Administrator SharePoint Administrator Exchange Administrator Conditional Access Administrator Application Administrator Cloud Application Administrator Password Administrator Privileged Authentication Administrator Privileged Role Administrator User Administrator	breakglass@contoso.example		MFA
Contoso Legal LLP	CA002 — All users: Require MFA	On	All users	breakglass@contoso.example + 11 admin roles breakglass@contoso.example Global Administrator Security Administrator SharePoint Administrator Exchange Administrator Conditional Access Administrator Application Administrator Cloud Application Administrator Password Administrator Privileged Authentication Administrator Privileged Role Administrator User Administrator		MFA
Contoso Legal LLP	CA003 — Block legacy authentication	On	All users	breakglass@contoso.example	Clients: ActiveSync, Other legacy	Block
Contoso Legal LLP	CA004 — All users: Require compliant or hybrid-joined device	On	All users	breakglass@contoso.example, annabel.fraser@contoso.example	Platforms: windows, macOS	Compliant device or Hybrid joined
Contoso Legal LLP	CA005 — Block sign-ins from disallowed countries	On	All users	breakglass@contoso.example	Locations	Block
Contoso Legal LLP	CA006 — Require MFA for Azure management	On	All users	breakglass@contoso.example		MFA
Contoso Legal LLP	CA007 — Admins: No persistent browser, 8h sign-in frequency	On	11 admin roles Global Administrator Security Administrator SharePoint Administrator Exchange Administrator Conditional Access Administrator Application Administrator Cloud Application Administrator Password Administrator Privileged Authentication Administrator Privileged Role Administrator User Administrator	breakglass@contoso.example		Session controls
Contoso Legal LLP	CA008 — All users: 8h sign-in frequency	On	All users	breakglass@contoso.example + 11 admin roles breakglass@contoso.example Global Administrator Security Administrator SharePoint Administrator Exchange Administrator Conditional Access Administrator Application Administrator Cloud Application Administrator Password Administrator Privileged Authentication Administrator Privileged Role Administrator User Administrator		Session controls
Contoso Legal LLP	CA009 — Require MFA for device registration	On	All users	breakglass@contoso.example		MFA
Contoso Legal LLP medium	CA010 — Insider risk: Step-up MFA	On, but never applies (needs Entra ID P2)	All users	breakglass@contoso.example	User risk: high	MFA
Contoso Legal LLP medium	CA011 — High sign-in risk: Block	On, but never applies (needs Entra ID P2)	All users	breakglass@contoso.example	Sign-in risk: high	Block
Fabrikam Dental Group	CA001 — Admins: Require phishing-resistant MFA	On	11 admin roles Global Administrator Security Administrator SharePoint Administrator Exchange Administrator Conditional Access Administrator Application Administrator Cloud Application Administrator Password Administrator Privileged Authentication Administrator Privileged Role Administrator User Administrator	breakglass@fabrikam.example		MFA
Fabrikam Dental Group	CA002 — All users: Require MFA	On	All users	breakglass@fabrikam.example + 11 admin roles breakglass@fabrikam.example Global Administrator Security Administrator SharePoint Administrator Exchange Administrator Conditional Access Administrator Application Administrator Cloud Application Administrator Password Administrator Privileged Authentication Administrator Privileged Role Administrator User Administrator		MFA
Fabrikam Dental Group	CA005 — Block sign-ins from disallowed countries	On	All users	breakglass@fabrikam.example	Locations	Block
Fabrikam Dental Group	CA006 — Require MFA for Azure management	On	All users	breakglass@fabrikam.example		MFA
Fabrikam Dental Group	CA007 — Admins: No persistent browser, 8h sign-in frequency	On	11 admin roles Global Administrator Security Administrator SharePoint Administrator Exchange Administrator Conditional Access Administrator Application Administrator Cloud Application Administrator Password Administrator Privileged Authentication Administrator Privileged Role Administrator User Administrator	breakglass@fabrikam.example		Session controls
Fabrikam Dental Group	CA008 — All users: 8h sign-in frequency	On	All users	breakglass@fabrikam.example + 11 admin roles breakglass@fabrikam.example Global Administrator Security Administrator SharePoint Administrator Exchange Administrator Conditional Access Administrator Application Administrator Cloud Application Administrator Password Administrator Privileged Authentication Administrator Privileged Role Administrator User Administrator		Session controls
Fabrikam Dental Group	CA009 — Require MFA for device registration	On	All users	breakglass@fabrikam.example		MFA
Fabrikam Dental Group medium	CA010 — Insider risk: Step-up MFA	On, but never applies (needs Entra ID P2)	All users	breakglass@fabrikam.example	User risk: high	MFA
Fabrikam Dental Group medium	CA011 — High sign-in risk: Block	On, but never applies (needs Entra ID P2)	All users	breakglass@fabrikam.example	Sign-in risk: high	Block
Fabrikam Dental Group	CA003 — Block legacy authentication	Report-only	All users	breakglass@fabrikam.example	Clients: ActiveSync, Other legacy	Block
Fabrikam Dental Group	CA004 — All users: Require compliant or hybrid-joined device	Report-only	All users	breakglass@fabrikam.example, anna.kowalski@fabrikam.example	Platforms: windows, macOS	Compliant device or Hybrid joined
Northwind Traders	Require MFA for all users	On	All users	breakglass@northwindtraders.example		MFA
Northwind Traders	MFA for admins (report only)	Report-only	Global Administrator			MFA

Built from each client's latest collection with the same report as the client's own page. Select a client's name to open its report.

All clients

Conditional Access coverage

Policies 24