Harbour ITMenu

Powered by Office Sentry 2.3.0

You're in the demo. Three fictional clients with made-up people. Look around freely: nothing can be changed, and it all resets every night.Get Office Sentry
Clients/Fabrikam Dental Group

Fabrikam Dental Group

fabrikam.onmicrosoft.com
Monthly review

Conditional Access coverage

Every policy in plain words, and which accounts each one actually covers.

All clients
Download PDFXLSX
Policies 2Coverage by account 55

Policies 2 of 11

2 to review CSV

Every policy in plain words, enforced ones first.

Requires: Session controlsRemove Clear filters
PolicyStateApplies toExceptAppsConditionsRequires
CA007 — Admins: No persistent browser, 8h sign-in frequencyOn
11 admin roles
  • Global Administrator
  • Security Administrator
  • SharePoint Administrator
  • Exchange Administrator
  • Conditional Access Administrator
  • Application Administrator
  • Cloud Application Administrator
  • Password Administrator
  • Privileged Authentication Administrator
  • Privileged Role Administrator
  • User Administrator
breakglass@fabrikam.exampleAll appsSession controls
CA008 — All users: 8h sign-in frequencyOnAll users
breakglass@fabrikam.example + 11 admin roles
  • breakglass@fabrikam.example
  • Global Administrator
  • Security Administrator
  • SharePoint Administrator
  • Exchange Administrator
  • Conditional Access Administrator
  • Application Administrator
  • Cloud Application Administrator
  • Password Administrator
  • Privileged Authentication Administrator
  • Privileged Role Administrator
  • User Administrator
All appsSession controls

Coverage by account 55

1 to review CSV

54 of 55 enabled accounts are covered by an enforced policy that requires MFA for all apps.

TypeAdmin rolesMFA required byLegacy sign‑in blockedExcluded from
Member highGlobal AdministratorNothingNo
CA001 — Admins: Require phishing-resistant MFA, CA002 — All users: Require MFA + 7 more
  • CA001 — Admins: Require phishing-resistant MFA
  • CA002 — All users: Require MFA
  • CA005 — Block sign-ins from disallowed countries
  • CA006 — Require MFA for Azure management
  • CA007 — Admins: No persistent browser, 8h sign-in frequency
  • CA008 — All users: 8h sign-in frequency
  • CA009 — Require MFA for device registration
  • CA010 — Insider risk: Step-up MFA
  • CA011 — High sign-in risk: Block
MemberGlobal AdministratorCA001 — Admins: Require phishing-resistant MFANoCA002 — All users: Require MFA, CA008 — All users: 8h sign-in frequency
GuestExchange AdministratorCA001 — Admins: Require phishing-resistant MFANoCA002 — All users: Require MFA, CA008 — All users: 8h sign-in frequency
MemberCA002 — All users: Require MFANo
MemberCA002 — All users: Require MFANo
MemberCA002 — All users: Require MFANo
MemberCA002 — All users: Require MFANo
MemberCA002 — All users: Require MFANo
MemberCA002 — All users: Require MFANo
MemberCA002 — All users: Require MFANo
MemberCA002 — All users: Require MFANo
MemberCA002 — All users: Require MFANo
MemberCA002 — All users: Require MFANo
MemberCA002 — All users: Require MFANo
MemberCA002 — All users: Require MFANo
MemberCA002 — All users: Require MFANo
MemberCA002 — All users: Require MFANo
MemberCA002 — All users: Require MFANo
MemberCA002 — All users: Require MFANo
MemberCA002 — All users: Require MFANo
MemberCA002 — All users: Require MFANo
MemberCA002 — All users: Require MFANo
MemberCA002 — All users: Require MFANo
MemberCA002 — All users: Require MFANo
MemberCA002 — All users: Require MFANo
MemberCA002 — All users: Require MFANo
MemberCA002 — All users: Require MFANo
MemberCA002 — All users: Require MFANo
MemberCA002 — All users: Require MFANo
MemberCA002 — All users: Require MFANo
MemberCA002 — All users: Require MFANo
MemberCA002 — All users: Require MFANo
MemberCA002 — All users: Require MFANo
MemberCA002 — All users: Require MFANo
MemberCA002 — All users: Require MFANo
MemberCA002 — All users: Require MFANo
MemberCA002 — All users: Require MFANo
MemberCA002 — All users: Require MFANo
MemberCA002 — All users: Require MFANo
MemberCA002 — All users: Require MFANo
MemberCA002 — All users: Require MFANo
MemberCA002 — All users: Require MFANo
MemberCA002 — All users: Require MFANo
MemberCA002 — All users: Require MFANo
MemberCA002 — All users: Require MFANo
MemberCA002 — All users: Require MFANo
MemberCA002 — All users: Require MFANo
MemberCA002 — All users: Require MFANo
MemberCA002 — All users: Require MFANo
MemberCA002 — All users: Require MFANo
MemberCA002 — All users: Require MFANo
MemberCA002 — All users: Require MFANo
MemberCA002 — All users: Require MFANo
MemberCA002 — All users: Require MFANo
MemberCA002 — All users: Require MFANo

Data from Conditional Access (), Admin roles (), Users ().