Contoso Legal LLP
contoso.onmicrosoft.com
Every policy in plain words, enforced ones first.
| Policy | State | Applies to | Except | Apps | Conditions | Requires |
|---|---|---|---|---|---|---|
| CA003 — Block legacy authentication | On | All users | breakglass@contoso.example | All apps | Clients: ActiveSync, Other legacy | Block |
| CA005 — Block sign-ins from disallowed countries | On | All users | breakglass@contoso.example | All apps | Locations | Block |
| CA011 — High sign-in risk: Block medium | On, but never applies (needs Entra ID P2) | All users | breakglass@contoso.example | All apps | Sign-in risk: high | Block |
19 of 20 enabled accounts are covered by an enforced policy that requires MFA for all apps.
| Account | Type | Admin roles | Legacy sign‑in blocked | Excluded from |
|---|---|---|---|---|
| breakglass@contoso.example high | Member | Global Administrator | No | CA001 — Admins: Require phishing-resistant MFA, CA002 — All users: Require MFA + 9 more
|
| annabel.fraser@ | Member | Global Administrator | Yes | CA002 — All users: Require MFA, CA004 — All users: Require compliant or hybrid-joined device, CA008 — All users: 8h sign-in frequency |
| g#EXT#@contoso.example | Guest | Exchange Administrator | Yes | CA002 — All users: Require MFA, CA008 — All users: 8h sign-in frequency |
| ella.thomas@contoso.example | Member | Yes | ||
| evie.davis@contoso.example | Member | Yes | ||
| jack.white@contoso.example | Member | Yes | ||
| jacob.johnson@contoso.example | Member | Yes | ||
| joseph.morris@contoso.example | Member | Yes | ||
| lily.harrison@contoso.example | Member | Yes | ||
| megan.smith@contoso.example | Member | Yes | ||
| noah.clark@contoso.example | Member | Yes | ||
| oliver.hill@contoso.example | Member | Yes | ||
| olivia.ward@contoso.example | Member | Yes | ||
| olivia.wilson@contoso.example | Member | Yes | ||
| owen.taylor@contoso.example | Member | Yes | ||
| priya.hughes@contoso.example | Member | Yes | ||
| rhys.evans@contoso.example | Member | Yes | ||
| sophie.taylor@contoso.example | Member | Yes | ||
| william.allen@contoso.example | Member | Yes | ||
| william.clark@contoso.example | Member | Yes |
Data from Conditional Access (), Admin roles (), Users ().