Harbour ITMenu

Powered by Office Sentry 2.3.0

You're in the demo. Three fictional clients with made-up people. Look around freely: nothing can be changed, and it all resets every night.Get Office Sentry
Clients/Fabrikam Dental Group

Fabrikam Dental Group

fabrikam.onmicrosoft.com

Conditional Access coverage

Every policy in plain words, and which accounts each one actually covers.

All clients
Download PDFXLSX

Every policy in plain words, enforced ones first.

PolicyStateApplies toAppsConditionsRequires
CA001 — Admins: Require phishing-resistant MFAOn
11 admin roles
  • Global Administrator
  • Security Administrator
  • SharePoint Administrator
  • Exchange Administrator
  • Conditional Access Administrator
  • Application Administrator
  • Cloud Application Administrator
  • Password Administrator
  • Privileged Authentication Administrator
  • Privileged Role Administrator
  • User Administrator
All appsMFA
CA002 — All users: Require MFAOnAll usersAll appsMFA
CA005 — Block sign-ins from disallowed countriesOnAll usersAll appsLocationsBlock
CA006 — Require MFA for Azure managementOnAll users1 appMFA
CA007 — Admins: No persistent browser, 8h sign-in frequencyOn
11 admin roles
  • Global Administrator
  • Security Administrator
  • SharePoint Administrator
  • Exchange Administrator
  • Conditional Access Administrator
  • Application Administrator
  • Cloud Application Administrator
  • Password Administrator
  • Privileged Authentication Administrator
  • Privileged Role Administrator
  • User Administrator
All appsSession controls
CA008 — All users: 8h sign-in frequencyOnAll usersAll appsSession controls
CA009 — Require MFA for device registrationOnAll usersUser actionsMFA
CA010 — Insider risk: Step-up MFA mediumOn, but never applies (needs Entra ID P2)All usersAll appsUser risk: highMFA
CA011 — High sign-in risk: Block mediumOn, but never applies (needs Entra ID P2)All usersAll appsSign-in risk: highBlock
CA003 — Block legacy authenticationReport-onlyAll usersAll appsClients: ActiveSync, Other legacyBlock
CA004 — All users: Require compliant or hybrid-joined deviceReport-onlyAll usersAll appsPlatforms: windows, macOSCompliant device or Hybrid joined

54 of 55 enabled accounts are covered by an enforced policy that requires MFA for all apps.

AccountTypeAdmin rolesMFA required byLegacy sign‑in blockedExcluded from
aaron.smith@fabrikam.exampleMemberCA002 — All users: Require MFANo
aisha.brown@fabrikam.exampleMemberCA002 — All users: Require MFANo
amelia.jackson@fabrikam.exampleMemberCA002 — All users: Require MFANo
amelia.khan@fabrikam.exampleMemberCA002 — All users: Require MFANo
arthur.lee@fabrikam.exampleMemberCA002 — All users: Require MFANo
arthur.williams@fabrikam.exampleMemberCA002 — All users: Require MFANo
ava.jackson@fabrikam.exampleMemberCA002 — All users: Require MFANo
ava.moore@fabrikam.exampleMemberCA002 — All users: Require MFANo
ava.thomas@fabrikam.exampleMemberCA002 — All users: Require MFANo
callum.turner@fabrikam.exampleMemberCA002 — All users: Require MFANo
chloe.jackson@fabrikam.exampleMemberCA002 — All users: Require MFANo
ella.evans@fabrikam.exampleMemberCA002 — All users: Require MFANo
ella.hughes@fabrikam.exampleMemberCA002 — All users: Require MFANo
ethan.jones@fabrikam.exampleMemberCA002 — All users: Require MFANo
freya.evans@fabrikam.exampleMemberCA002 — All users: Require MFANo
george.baker@fabrikam.exampleMemberCA002 — All users: Require MFANo
george.walker@fabrikam.exampleMemberCA002 — All users: Require MFANo
george.williams@fabrikam.exampleMemberCA002 — All users: Require MFANo
henry.roberts@fabrikam.exampleMemberCA002 — All users: Require MFANo
isla.scott@fabrikam.exampleMemberCA002 — All users: Require MFANo
jack.lee@fabrikam.exampleMemberCA002 — All users: Require MFANo
jack.roberts@fabrikam.exampleMemberCA002 — All users: Require MFANo
jack.ward@fabrikam.exampleMemberCA002 — All users: Require MFANo
leo.harrison@fabrikam.exampleMemberCA002 — All users: Require MFANo
lily.khan@fabrikam.exampleMemberCA002 — All users: Require MFANo
lily.watson@fabrikam.exampleMemberCA002 — All users: Require MFANo
lily.white@fabrikam.exampleMemberCA002 — All users: Require MFANo
megan.green@fabrikam.exampleMemberCA002 — All users: Require MFANo
megan.king@fabrikam.exampleMemberCA002 — All users: Require MFANo
noah.harris@fabrikam.exampleMemberCA002 — All users: Require MFANo
noah.wood@fabrikam.exampleMemberCA002 — All users: Require MFANo
olivia.taylor@fabrikam.exampleMemberCA002 — All users: Require MFANo
oscar.smith@fabrikam.exampleMemberCA002 — All users: Require MFANo
owen.khan@fabrikam.exampleMemberCA002 — All users: Require MFANo
owen.patel@fabrikam.exampleMemberCA002 — All users: Require MFANo
owen.robinson@fabrikam.exampleMemberCA002 — All users: Require MFANo
owen.scott@fabrikam.exampleMemberCA002 — All users: Require MFANo
owen.smith@fabrikam.exampleMemberCA002 — All users: Require MFANo
owen.turner@fabrikam.exampleMemberCA002 — All users: Require MFANo
priya.williams@fabrikam.exampleMemberCA002 — All users: Require MFANo
rhys.hall@fabrikam.exampleMemberCA002 — All users: Require MFANo
rhys.scott@fabrikam.exampleMemberCA002 — All users: Require MFANo
rhys.walker@fabrikam.exampleMemberCA002 — All users: Require MFANo
ruby.clark@fabrikam.exampleMemberCA002 — All users: Require MFANo
ruby.davies@fabrikam.exampleMemberCA002 — All users: Require MFANo
ruby.wood@fabrikam.exampleMemberCA002 — All users: Require MFANo
thomas.allen@fabrikam.exampleMemberCA002 — All users: Require MFANo
thomas.johnson@fabrikam.exampleMemberCA002 — All users: Require MFANo
thomas.robinson@fabrikam.exampleMemberCA002 — All users: Require MFANo
william.lewis@fabrikam.exampleMemberCA002 — All users: Require MFANo
william.wood@fabrikam.exampleMemberCA002 — All users: Require MFANo
zara.edwards@fabrikam.exampleMemberCA002 — All users: Require MFANo

Data from Conditional Access (), Admin roles (), Users ().