Clients/Fabrikam Dental Group

Fabrikam Dental Group

fabrikam.onmicrosoft.com

Report

Every policy in plain words, enforced ones first.

Policy	State	Applies to	Except	Apps	Conditions
CA001 — Admins: Require phishing-resistant MFA	On	11 admin roles Global Administrator Security Administrator SharePoint Administrator Exchange Administrator Conditional Access Administrator Application Administrator Cloud Application Administrator Password Administrator Privileged Authentication Administrator Privileged Role Administrator User Administrator	breakglass@fabrikam.example	All apps
CA002 — All users: Require MFA	On	All users	breakglass@fabrikam.example + 11 admin roles breakglass@fabrikam.example Global Administrator Security Administrator SharePoint Administrator Exchange Administrator Conditional Access Administrator Application Administrator Cloud Application Administrator Password Administrator Privileged Authentication Administrator Privileged Role Administrator User Administrator	All apps
CA005 — Block sign-ins from disallowed countries	On	All users	breakglass@fabrikam.example	All apps	Locations
CA007 — Admins: No persistent browser, 8h sign-in frequency	On	11 admin roles Global Administrator Security Administrator SharePoint Administrator Exchange Administrator Conditional Access Administrator Application Administrator Cloud Application Administrator Password Administrator Privileged Authentication Administrator Privileged Role Administrator User Administrator	breakglass@fabrikam.example	All apps
CA008 — All users: 8h sign-in frequency	On	All users	breakglass@fabrikam.example + 11 admin roles breakglass@fabrikam.example Global Administrator Security Administrator SharePoint Administrator Exchange Administrator Conditional Access Administrator Application Administrator Cloud Application Administrator Password Administrator Privileged Authentication Administrator Privileged Role Administrator User Administrator	All apps
CA010 — Insider risk: Step-up MFA medium	On, but never applies (needs Entra ID P2)	All users	breakglass@fabrikam.example	All apps	User risk: high
CA011 — High sign-in risk: Block medium	On, but never applies (needs Entra ID P2)	All users	breakglass@fabrikam.example	All apps	Sign-in risk: high
CA003 — Block legacy authentication	Report-only	All users	breakglass@fabrikam.example	All apps	Clients: ActiveSync, Other legacy
CA004 — All users: Require compliant or hybrid-joined device	Report-only	All users	breakglass@fabrikam.example, anna.kowalski@fabrikam.example	All apps	Platforms: windows, macOS

54 of 55 enabled accounts are covered by an enforced policy that requires MFA for all apps.

Account	Type	Admin roles	MFA required by	Legacy sign‑in blocked	Excluded from
breakglass@fabrikam.example high	Member	Global Administrator	Nothing	No	CA001 — Admins: Require phishing-resistant MFA, CA002 — All users: Require MFA + 7 more CA001 — Admins: Require phishing-resistant MFA CA002 — All users: Require MFA CA005 — Block sign-ins from disallowed countries CA006 — Require MFA for Azure management CA007 — Admins: No persistent browser, 8h sign-in frequency CA008 — All users: 8h sign-in frequency CA009 — Require MFA for device registration CA010 — Insider risk: Step-up MFA CA011 — High sign-in risk: Block
anna.kowalski@fabrikam.example	Member	Global Administrator	CA001 — Admins: Require phishing-resistant MFA	No	CA002 — All users: Require MFA, CA008 — All users: 8h sign-in frequency
g#EXT#@fabrikam.example	Guest	Exchange Administrator	CA001 — Admins: Require phishing-resistant MFA	No	CA002 — All users: Require MFA, CA008 — All users: 8h sign-in frequency
aaron.smith@fabrikam.example	Member		CA002 — All users: Require MFA	No
aisha.brown@fabrikam.example	Member		CA002 — All users: Require MFA	No
amelia.jackson@fabrikam.example	Member		CA002 — All users: Require MFA	No
amelia.khan@fabrikam.example	Member		CA002 — All users: Require MFA	No
arthur.lee@fabrikam.example	Member		CA002 — All users: Require MFA	No
arthur.williams@fabrikam.example	Member		CA002 — All users: Require MFA	No
ava.jackson@fabrikam.example	Member		CA002 — All users: Require MFA	No
ava.moore@fabrikam.example	Member		CA002 — All users: Require MFA	No
ava.thomas@fabrikam.example	Member		CA002 — All users: Require MFA	No
callum.turner@fabrikam.example	Member		CA002 — All users: Require MFA	No
chloe.jackson@fabrikam.example	Member		CA002 — All users: Require MFA	No
ella.evans@fabrikam.example	Member		CA002 — All users: Require MFA	No
ella.hughes@fabrikam.example	Member		CA002 — All users: Require MFA	No
ethan.jones@fabrikam.example	Member		CA002 — All users: Require MFA	No
freya.evans@fabrikam.example	Member		CA002 — All users: Require MFA	No
george.baker@fabrikam.example	Member		CA002 — All users: Require MFA	No
george.walker@fabrikam.example	Member		CA002 — All users: Require MFA	No
george.williams@fabrikam.example	Member		CA002 — All users: Require MFA	No
henry.roberts@fabrikam.example	Member		CA002 — All users: Require MFA	No
isla.scott@fabrikam.example	Member		CA002 — All users: Require MFA	No
jack.lee@fabrikam.example	Member		CA002 — All users: Require MFA	No
jack.roberts@fabrikam.example	Member		CA002 — All users: Require MFA	No
jack.ward@fabrikam.example	Member		CA002 — All users: Require MFA	No
leo.harrison@fabrikam.example	Member		CA002 — All users: Require MFA	No
lily.khan@fabrikam.example	Member		CA002 — All users: Require MFA	No
lily.watson@fabrikam.example	Member		CA002 — All users: Require MFA	No
lily.white@fabrikam.example	Member		CA002 — All users: Require MFA	No
megan.green@fabrikam.example	Member		CA002 — All users: Require MFA	No
megan.king@fabrikam.example	Member		CA002 — All users: Require MFA	No
noah.harris@fabrikam.example	Member		CA002 — All users: Require MFA	No
noah.wood@fabrikam.example	Member		CA002 — All users: Require MFA	No
olivia.taylor@fabrikam.example	Member		CA002 — All users: Require MFA	No
oscar.smith@fabrikam.example	Member		CA002 — All users: Require MFA	No
owen.khan@fabrikam.example	Member		CA002 — All users: Require MFA	No
owen.patel@fabrikam.example	Member		CA002 — All users: Require MFA	No
owen.robinson@fabrikam.example	Member		CA002 — All users: Require MFA	No
owen.scott@fabrikam.example	Member		CA002 — All users: Require MFA	No
owen.smith@fabrikam.example	Member		CA002 — All users: Require MFA	No
owen.turner@fabrikam.example	Member		CA002 — All users: Require MFA	No
priya.williams@fabrikam.example	Member		CA002 — All users: Require MFA	No
rhys.hall@fabrikam.example	Member		CA002 — All users: Require MFA	No
rhys.scott@fabrikam.example	Member		CA002 — All users: Require MFA	No
rhys.walker@fabrikam.example	Member		CA002 — All users: Require MFA	No
ruby.clark@fabrikam.example	Member		CA002 — All users: Require MFA	No
ruby.davies@fabrikam.example	Member		CA002 — All users: Require MFA	No
ruby.wood@fabrikam.example	Member		CA002 — All users: Require MFA	No
thomas.allen@fabrikam.example	Member		CA002 — All users: Require MFA	No
thomas.johnson@fabrikam.example	Member		CA002 — All users: Require MFA	No
thomas.robinson@fabrikam.example	Member		CA002 — All users: Require MFA	No
william.lewis@fabrikam.example	Member		CA002 — All users: Require MFA	No
william.wood@fabrikam.example	Member		CA002 — All users: Require MFA	No
zara.edwards@fabrikam.example	Member		CA002 — All users: Require MFA	No

Data from Conditional Access (1 hour ago), Admin roles (1 hour ago), Users (1 hour ago).

Conditional Access coverage

Policies 9 of 11

Coverage by account 55