Harbour ITMenu

Powered by Office Sentry 2.3.1

You're in the demo. Three fictional clients with made-up people. Look around freely: nothing can be changed, and it all resets every night.Get Office Sentry
Clients/Fabrikam Dental Group

Fabrikam Dental Group

fabrikam.onmicrosoft.com

Conditional Access coverage

Every policy in plain words, and which accounts each one actually covers.

All clients
Download PDFXLSX

Every policy in plain words, enforced ones first.

StateApplies toExceptAppsConditionsRequires
On
11 admin roles
  • Global Administrator
  • Security Administrator
  • SharePoint Administrator
  • Exchange Administrator
  • Conditional Access Administrator
  • Application Administrator
  • Cloud Application Administrator
  • Password Administrator
  • Privileged Authentication Administrator
  • Privileged Role Administrator
  • User Administrator
breakglass@fabrikam.exampleAll appsMFA
OnAll users
breakglass@fabrikam.example + 11 admin roles
  • breakglass@fabrikam.example
  • Global Administrator
  • Security Administrator
  • SharePoint Administrator
  • Exchange Administrator
  • Conditional Access Administrator
  • Application Administrator
  • Cloud Application Administrator
  • Password Administrator
  • Privileged Authentication Administrator
  • Privileged Role Administrator
  • User Administrator
All appsMFA
OnAll usersbreakglass@fabrikam.exampleAll appsLocationsBlock
OnAll usersbreakglass@fabrikam.example1 appMFA
On
11 admin roles
  • Global Administrator
  • Security Administrator
  • SharePoint Administrator
  • Exchange Administrator
  • Conditional Access Administrator
  • Application Administrator
  • Cloud Application Administrator
  • Password Administrator
  • Privileged Authentication Administrator
  • Privileged Role Administrator
  • User Administrator
breakglass@fabrikam.exampleAll appsSession controls
OnAll users
breakglass@fabrikam.example + 11 admin roles
  • breakglass@fabrikam.example
  • Global Administrator
  • Security Administrator
  • SharePoint Administrator
  • Exchange Administrator
  • Conditional Access Administrator
  • Application Administrator
  • Cloud Application Administrator
  • Password Administrator
  • Privileged Authentication Administrator
  • Privileged Role Administrator
  • User Administrator
All appsSession controls
OnAll usersbreakglass@fabrikam.exampleUser actionsMFA
On, but never applies (needs Entra ID P2) mediumAll usersbreakglass@fabrikam.exampleAll appsUser risk: highMFA
On, but never applies (needs Entra ID P2) mediumAll usersbreakglass@fabrikam.exampleAll appsSign-in risk: highBlock
Report-onlyAll usersbreakglass@fabrikam.exampleAll appsClients: ActiveSync, Other legacyBlock
Report-onlyAll usersbreakglass@fabrikam.example, anna.kowalski@fabrikam.exampleAll appsPlatforms: windows, macOSCompliant device or Hybrid joined

54 of 55 enabled accounts are covered by an enforced policy that requires MFA for all apps.

AccountTypeAdmin rolesMFA required byLegacy sign‑in blockedExcluded from
anna.kowalski@fabrikam.exampleMemberGlobal AdministratorCA001 — Admins: Require phishing-resistant MFANoCA002 — All users: Require MFA, CA008 — All users: 8h sign-in frequency
g#EXT#@fabrikam.exampleGuestExchange AdministratorCA001 — Admins: Require phishing-resistant MFANoCA002 — All users: Require MFA, CA008 — All users: 8h sign-in frequency
aaron.smith@fabrikam.exampleMemberCA002 — All users: Require MFANo
aisha.brown@fabrikam.exampleMemberCA002 — All users: Require MFANo
amelia.jackson@fabrikam.exampleMemberCA002 — All users: Require MFANo
amelia.khan@fabrikam.exampleMemberCA002 — All users: Require MFANo
arthur.lee@fabrikam.exampleMemberCA002 — All users: Require MFANo
arthur.williams@fabrikam.exampleMemberCA002 — All users: Require MFANo
ava.jackson@fabrikam.exampleMemberCA002 — All users: Require MFANo
ava.moore@fabrikam.exampleMemberCA002 — All users: Require MFANo
ava.thomas@fabrikam.exampleMemberCA002 — All users: Require MFANo
callum.turner@fabrikam.exampleMemberCA002 — All users: Require MFANo
chloe.jackson@fabrikam.exampleMemberCA002 — All users: Require MFANo
ella.evans@fabrikam.exampleMemberCA002 — All users: Require MFANo
ella.hughes@fabrikam.exampleMemberCA002 — All users: Require MFANo
ethan.jones@fabrikam.exampleMemberCA002 — All users: Require MFANo
freya.evans@fabrikam.exampleMemberCA002 — All users: Require MFANo
george.baker@fabrikam.exampleMemberCA002 — All users: Require MFANo
george.walker@fabrikam.exampleMemberCA002 — All users: Require MFANo
george.williams@fabrikam.exampleMemberCA002 — All users: Require MFANo
henry.roberts@fabrikam.exampleMemberCA002 — All users: Require MFANo
isla.scott@fabrikam.exampleMemberCA002 — All users: Require MFANo
jack.lee@fabrikam.exampleMemberCA002 — All users: Require MFANo
jack.roberts@fabrikam.exampleMemberCA002 — All users: Require MFANo
jack.ward@fabrikam.exampleMemberCA002 — All users: Require MFANo
leo.harrison@fabrikam.exampleMemberCA002 — All users: Require MFANo
lily.khan@fabrikam.exampleMemberCA002 — All users: Require MFANo
lily.watson@fabrikam.exampleMemberCA002 — All users: Require MFANo
lily.white@fabrikam.exampleMemberCA002 — All users: Require MFANo
megan.green@fabrikam.exampleMemberCA002 — All users: Require MFANo
megan.king@fabrikam.exampleMemberCA002 — All users: Require MFANo
noah.harris@fabrikam.exampleMemberCA002 — All users: Require MFANo
noah.wood@fabrikam.exampleMemberCA002 — All users: Require MFANo
olivia.taylor@fabrikam.exampleMemberCA002 — All users: Require MFANo
oscar.smith@fabrikam.exampleMemberCA002 — All users: Require MFANo
owen.khan@fabrikam.exampleMemberCA002 — All users: Require MFANo
owen.patel@fabrikam.exampleMemberCA002 — All users: Require MFANo
owen.robinson@fabrikam.exampleMemberCA002 — All users: Require MFANo
owen.scott@fabrikam.exampleMemberCA002 — All users: Require MFANo
owen.smith@fabrikam.exampleMemberCA002 — All users: Require MFANo
owen.turner@fabrikam.exampleMemberCA002 — All users: Require MFANo
priya.williams@fabrikam.exampleMemberCA002 — All users: Require MFANo
rhys.hall@fabrikam.exampleMemberCA002 — All users: Require MFANo
rhys.scott@fabrikam.exampleMemberCA002 — All users: Require MFANo
rhys.walker@fabrikam.exampleMemberCA002 — All users: Require MFANo
ruby.clark@fabrikam.exampleMemberCA002 — All users: Require MFANo
ruby.davies@fabrikam.exampleMemberCA002 — All users: Require MFANo
ruby.wood@fabrikam.exampleMemberCA002 — All users: Require MFANo
thomas.allen@fabrikam.exampleMemberCA002 — All users: Require MFANo
thomas.johnson@fabrikam.exampleMemberCA002 — All users: Require MFANo
thomas.robinson@fabrikam.exampleMemberCA002 — All users: Require MFANo
william.lewis@fabrikam.exampleMemberCA002 — All users: Require MFANo
william.wood@fabrikam.exampleMemberCA002 — All users: Require MFANo
zara.edwards@fabrikam.exampleMemberCA002 — All users: Require MFANo

Data from Conditional Access (), Admin roles (), Users ().