Harbour ITMenu

Powered by Office Sentry 2.3.0

You're in the demo. Three fictional clients with made-up people. Look around freely: nothing can be changed, and it all resets every night.Get Office Sentry
Clients/Contoso Legal LLP

Contoso Legal LLP

contoso.onmicrosoft.com
Monthly review

Conditional Access coverage

Every policy in plain words, and which accounts each one actually covers.

All clients
Download PDFXLSX
Policies 3Coverage by account 20

Policies 3 of 11

2 to review CSV

Every policy in plain words, enforced ones first.

Requires: BlockRemove Clear filters
StateApplies toExceptAppsConditionsRequires
OnAll usersbreakglass@contoso.exampleAll appsClients: ActiveSync, Other legacyBlock
OnAll usersbreakglass@contoso.exampleAll appsLocationsBlock
On, but never applies (needs Entra ID P2) mediumAll usersbreakglass@contoso.exampleAll appsSign-in risk: highBlock

Coverage by account 20

1 to review CSV

19 of 20 enabled accounts are covered by an enforced policy that requires MFA for all apps.

AccountTypeAdmin rolesMFA required byLegacy sign‑in blockedExcluded from
breakglass@contoso.example highMemberGlobal AdministratorNothingNo
CA001 — Admins: Require phishing-resistant MFA, CA002 — All users: Require MFA + 9 more
  • CA001 — Admins: Require phishing-resistant MFA
  • CA002 — All users: Require MFA
  • CA003 — Block legacy authentication
  • CA004 — All users: Require compliant or hybrid-joined device
  • CA005 — Block sign-ins from disallowed countries
  • CA006 — Require MFA for Azure management
  • CA007 — Admins: No persistent browser, 8h sign-in frequency
  • CA008 — All users: 8h sign-in frequency
  • CA009 — Require MFA for device registration
  • CA010 — Insider risk: Step-up MFA
  • CA011 — High sign-in risk: Block
annabel.fraser@contoso.exampleMemberGlobal AdministratorCA001 — Admins: Require phishing-resistant MFAYesCA002 — All users: Require MFA, CA004 — All users: Require compliant or hybrid-joined device, CA008 — All users: 8h sign-in frequency
g#EXT#@contoso.exampleGuestExchange AdministratorCA001 — Admins: Require phishing-resistant MFAYesCA002 — All users: Require MFA, CA008 — All users: 8h sign-in frequency
ella.thomas@contoso.exampleMemberCA002 — All users: Require MFAYes
evie.davis@contoso.exampleMemberCA002 — All users: Require MFAYes
jack.white@contoso.exampleMemberCA002 — All users: Require MFAYes
jacob.johnson@contoso.exampleMemberCA002 — All users: Require MFAYes
joseph.morris@contoso.exampleMemberCA002 — All users: Require MFAYes
lily.harrison@contoso.exampleMemberCA002 — All users: Require MFAYes
megan.smith@contoso.exampleMemberCA002 — All users: Require MFAYes
noah.clark@contoso.exampleMemberCA002 — All users: Require MFAYes
oliver.hill@contoso.exampleMemberCA002 — All users: Require MFAYes
olivia.ward@contoso.exampleMemberCA002 — All users: Require MFAYes
olivia.wilson@contoso.exampleMemberCA002 — All users: Require MFAYes
owen.taylor@contoso.exampleMemberCA002 — All users: Require MFAYes
priya.hughes@contoso.exampleMemberCA002 — All users: Require MFAYes
rhys.evans@contoso.exampleMemberCA002 — All users: Require MFAYes
sophie.taylor@contoso.exampleMemberCA002 — All users: Require MFAYes
william.allen@contoso.exampleMemberCA002 — All users: Require MFAYes
william.clark@contoso.exampleMemberCA002 — All users: Require MFAYes

Data from Conditional Access (), Admin roles (), Users ().