Fabrikam Dental Group
fabrikam.onmicrosoft.com
Every policy in plain words, enforced ones first.
| Policy | State | Applies to | Except | Apps | Conditions | Requires |
|---|---|---|---|---|---|---|
| CA005 — Block sign-ins from disallowed countries | On | All users | breakglass@fabrikam.example | All apps | Locations | Block |
| CA011 — High sign-in risk: Block medium | On, but never applies (needs Entra ID P2) | All users | breakglass@fabrikam.example | All apps | Sign-in risk: high | Block |
| CA003 — Block legacy authentication | Report-only | All users | breakglass@fabrikam.example | All apps | Clients: ActiveSync, Other legacy | Block |
54 of 55 enabled accounts are covered by an enforced policy that requires MFA for all apps.
| Type | Admin roles | MFA required by | Legacy sign‑in blocked | Excluded from |
|---|---|---|---|---|
| Member high | Global Administrator | Nothing | No | CA001 — Admins: Require phishing-resistant MFA, CA002 — All users: Require MFA + 7 more
|
| Member | Global Administrator | CA001 — Admins: Require phishing-resistant MFA | No | CA002 — All users: Require MFA, CA008 — All users: 8h sign-in frequency |
| Guest | Exchange Administrator | CA001 — Admins: Require phishing-resistant MFA | No | CA002 — All users: Require MFA, CA008 — All users: 8h sign-in frequency |
| Member | CA002 — All users: Require MFA | No | ||
| Member | CA002 — All users: Require MFA | No | ||
| Member | CA002 — All users: Require MFA | No | ||
| Member | CA002 — All users: Require MFA | No | ||
| Member | CA002 — All users: Require MFA | No | ||
| Member | CA002 — All users: Require MFA | No | ||
| Member | CA002 — All users: Require MFA | No | ||
| Member | CA002 — All users: Require MFA | No | ||
| Member | CA002 — All users: Require MFA | No | ||
| Member | CA002 — All users: Require MFA | No | ||
| Member | CA002 — All users: Require MFA | No | ||
| Member | CA002 — All users: Require MFA | No | ||
| Member | CA002 — All users: Require MFA | No | ||
| Member | CA002 — All users: Require MFA | No | ||
| Member | CA002 — All users: Require MFA | No | ||
| Member | CA002 — All users: Require MFA | No | ||
| Member | CA002 — All users: Require MFA | No | ||
| Member | CA002 — All users: Require MFA | No | ||
| Member | CA002 — All users: Require MFA | No | ||
| Member | CA002 — All users: Require MFA | No | ||
| Member | CA002 — All users: Require MFA | No | ||
| Member | CA002 — All users: Require MFA | No | ||
| Member | CA002 — All users: Require MFA | No | ||
| Member | CA002 — All users: Require MFA | No | ||
| Member | CA002 — All users: Require MFA | No | ||
| Member | CA002 — All users: Require MFA | No | ||
| Member | CA002 — All users: Require MFA | No | ||
| Member | CA002 — All users: Require MFA | No | ||
| Member | CA002 — All users: Require MFA | No | ||
| Member | CA002 — All users: Require MFA | No | ||
| Member | CA002 — All users: Require MFA | No | ||
| Member | CA002 — All users: Require MFA | No | ||
| Member | CA002 — All users: Require MFA | No | ||
| Member | CA002 — All users: Require MFA | No | ||
| Member | CA002 — All users: Require MFA | No | ||
| Member | CA002 — All users: Require MFA | No | ||
| Member | CA002 — All users: Require MFA | No | ||
| Member | CA002 — All users: Require MFA | No | ||
| Member | CA002 — All users: Require MFA | No | ||
| Member | CA002 — All users: Require MFA | No | ||
| Member | CA002 — All users: Require MFA | No | ||
| Member | CA002 — All users: Require MFA | No | ||
| Member | CA002 — All users: Require MFA | No | ||
| Member | CA002 — All users: Require MFA | No | ||
| Member | CA002 — All users: Require MFA | No | ||
| Member | CA002 — All users: Require MFA | No | ||
| Member | CA002 — All users: Require MFA | No | ||
| Member | CA002 — All users: Require MFA | No | ||
| Member | CA002 — All users: Require MFA | No | ||
| Member | CA002 — All users: Require MFA | No | ||
| Member | CA002 — All users: Require MFA | No | ||
| Member | CA002 — All users: Require MFA | No |
Data from Conditional Access (), Admin roles (), Users ().