Conditional Access Succeeded
Run 125 · queued · finished
Requests to Microsoft
7
2 endpoints
Throttled
0
Microsoft never said “too many”
Time waiting
none
for retries and Microsoft's limits
Numbers recorded
- ca.policies_enabled
- 9
- ca.policies_report_only
- 2
- ca.policies_total
- 11
- ca.security_defaults_enabled
- 0
Items collected
| Endpoint | Microsoft's limit | Requests | Throttled | Failed | Waiting | Units |
|---|---|---|---|---|---|---|
| /identity/conditionalAccess/policies v1.0 | Users, groups and directory3,500 resource units per 10 seconds, per tenant | 6 | – | – | – | 6 |
| /policies/identitySecurityDefaultsEnforcementPolicy v1.0 | Users, groups and directory3,500 resource units per 10 seconds, per tenant | 1 | – | – | – | 1 |
| conditions | displayName | grantControls | id | sessionControls | state |
|---|---|---|---|---|---|
| {'applications': {'includeApplications': ['All']}, 'clientAppTypes': ['all'], 'users': {'excludeUsers': ['u4'], 'includeRoles': ['role-ga', '194ae4cb-b126-40b2-bd5b-6091b380977d', 'f28a1f50-f6e7-4571-818b-6a12f2af6b6c', 'role-exch', 'b1be1c3e-b65d-4f19-8427-f6fa0d97feb9', '9b895d92-2cd3-44c7-9d02-a6ac2d5ea5c3', '158c047a-c907-4556-b7ef-446551a6b5f7', '966707d0-3269-4727-9be2-8c3a10f19b9d', '7be44c8a-adaf-4e2a-84d6-ab2649e08a13', 'e8611ab8-c189-46e8-94e1-60213ab1f814', 'fe930be7-5e62-47db-91af-98c3a49a38b1']}} | CA001 — Admins: Require phishing-resistant MFA | {'builtInControls': ['mfa'], 'operator': 'OR'} | ca-001 | enabled | |
| {'applications': {'includeApplications': ['All']}, 'clientAppTypes': ['all'], 'users': {'excludeRoles': ['role-ga', '194ae4cb-b126-40b2-bd5b-6091b380977d', 'f28a1f50-f6e7-4571-818b-6a12f2af6b6c', 'role-exch', 'b1be1c3e-b65d-4f19-8427-f6fa0d97feb9', '9b895d92-2cd3-44c7-9d02-a6ac2d5ea5c3', '158c047a-c907-4556-b7ef-446551a6b5f7', '966707d0-3269-4727-9be2-8c3a10f19b9d', '7be44c8a-adaf-4e2a-84d6-ab2649e08a13', 'e8611ab8-c189-46e8-94e1-60213ab1f814', 'fe930be7-5e62-47db-91af-98c3a49a38b1'], 'excludeUsers': ['u4'], 'includeUsers': ['All']}} | CA002 — All users: Require MFA | {'builtInControls': ['mfa'], 'operator': 'OR'} | ca-002 | enabled | |
| {'applications': {'includeApplications': ['All']}, 'clientAppTypes': ['exchangeActiveSync', 'other'], 'users': {'excludeUsers': ['u4'], 'includeUsers': ['All']}} | CA003 — Block legacy authentication | {'builtInControls': ['block'], 'operator': 'OR'} | ca-003 | enabledForReportingButNotEnforced | |
| {'applications': {'includeApplications': ['All']}, 'clientAppTypes': ['all'], 'platforms': {'includePlatforms': ['windows', 'macOS']}, 'users': {'excludeUsers': ['u4', 'u1'], 'includeUsers': ['All']}} | CA004 — All users: Require compliant or hybrid-joined device | {'builtInControls': ['compliantDevice', 'domainJoinedDevice'], 'operator': 'OR'} | ca-004 | enabledForReportingButNotEnforced | |
| {'applications': {'includeApplications': ['All']}, 'clientAppTypes': ['all'], 'locations': {'includeLocations': ['blocked-countries']}, 'users': {'excludeUsers': ['u4'], 'includeUsers': ['All']}} | CA005 — Block sign-ins from disallowed countries | {'builtInControls': ['block'], 'operator': 'OR'} | ca-005 | enabled | |
| {'applications': {'includeApplications': ['797f4846-ba00-4fd7-ba43-dac1f8f63013']}, 'clientAppTypes': ['all'], 'users': {'excludeUsers': ['u4'], 'includeUsers': ['All']}} | CA006 — Require MFA for Azure management | {'builtInControls': ['mfa'], 'operator': 'OR'} | ca-006 | enabled | |
| {'applications': {'includeApplications': ['All']}, 'clientAppTypes': ['all'], 'users': {'excludeUsers': ['u4'], 'includeRoles': ['role-ga', '194ae4cb-b126-40b2-bd5b-6091b380977d', 'f28a1f50-f6e7-4571-818b-6a12f2af6b6c', 'role-exch', 'b1be1c3e-b65d-4f19-8427-f6fa0d97feb9', '9b895d92-2cd3-44c7-9d02-a6ac2d5ea5c3', '158c047a-c907-4556-b7ef-446551a6b5f7', '966707d0-3269-4727-9be2-8c3a10f19b9d', '7be44c8a-adaf-4e2a-84d6-ab2649e08a13', 'e8611ab8-c189-46e8-94e1-60213ab1f814', 'fe930be7-5e62-47db-91af-98c3a49a38b1']}} | CA007 — Admins: No persistent browser, 8h sign-in frequency | ca-007 | {'signInFrequency': {'isEnabled': True, 'type': 'hours', 'value': 8}} | enabled | |
| {'applications': {'includeApplications': ['All']}, 'clientAppTypes': ['all'], 'users': {'excludeRoles': ['role-ga', '194ae4cb-b126-40b2-bd5b-6091b380977d', 'f28a1f50-f6e7-4571-818b-6a12f2af6b6c', 'role-exch', 'b1be1c3e-b65d-4f19-8427-f6fa0d97feb9', '9b895d92-2cd3-44c7-9d02-a6ac2d5ea5c3', '158c047a-c907-4556-b7ef-446551a6b5f7', '966707d0-3269-4727-9be2-8c3a10f19b9d', '7be44c8a-adaf-4e2a-84d6-ab2649e08a13', 'e8611ab8-c189-46e8-94e1-60213ab1f814', 'fe930be7-5e62-47db-91af-98c3a49a38b1'], 'excludeUsers': ['u4'], 'includeUsers': ['All']}} | CA008 — All users: 8h sign-in frequency | ca-008 | {'signInFrequency': {'isEnabled': True, 'type': 'hours', 'value': 8}} | enabled | |
| {'applications': {'includeUserActions': ['urn:user:registerdevice']}, 'clientAppTypes': ['all'], 'users': {'excludeUsers': ['u4'], 'includeUsers': ['All']}} | CA009 — Require MFA for device registration | {'builtInControls': ['mfa'], 'operator': 'OR'} | ca-009 | enabled | |
| {'applications': {'includeApplications': ['All']}, 'clientAppTypes': ['all'], 'userRiskLevels': ['high'], 'users': {'excludeUsers': ['u4'], 'includeUsers': ['All']}} | CA010 — Insider risk: Step-up MFA | {'builtInControls': ['mfa'], 'operator': 'OR'} | ca-010 | enabled | |
| {'applications': {'includeApplications': ['All']}, 'clientAppTypes': ['all'], 'signInRiskLevels': ['high'], 'users': {'excludeUsers': ['u4'], 'includeUsers': ['All']}} | CA011 — High sign-in risk: Block | {'builtInControls': ['block'], 'operator': 'OR'} | ca-011 | enabled |
Log
06:36:49 INFO Starting Conditional Access for Fabrikam Dental Group 06:36:49 INFO Stored 1 security_defaults object 06:36:49 INFO Stored 11 ca_policy objects 06:36:49 INFO Stored 0 ca_group objects 06:36:49 INFO Finished: succeeded