Contoso Legal LLP
contoso.onmicrosoft.com
Each row is an account or setting a check flagged. Findings close on their own once the next collection no longer sees the problem. If something is intentional, accept the risk so it moves out of the totals.
Open findings
77
from 40 checks
Critical or high
18
fix these first
New in 30 days
5
first seen since 16 Sep
Open over 90 days
0
Accepted risks
0
left out of the totals
Check: Every admin is covered by an MFA policyRemoveFirst seen: older than 30 daysRemove
Clear filters
| Severity | Account or item | Detail | Category | First seen | Action |
|---|---|---|---|---|---|
| high | breakglass@contoso.example | Global Administrator: excluded from CA001 — Admins: Require phishing-resistant MFA, CA002 — All users: Require MFA, CA003 — Block legacy authentication, CA004 — All users: Require compliant or hybrid-joined device, CA005 — Block sign-ins from disallowed countries, CA006 — Require MFA for Azure management, CA007 — Admins: No persistent browser, 8h sign-in frequency, CA008 — All users: 8h sign-in frequency, CA009 — Require MFA for device registration, CA010 — Insider risk: Step-up MFA, CA011 — High sign-in risk: Block | Admins | 11 Sep 2026 |
Accept risk |
Accepted risks 0
No accepted risks. When something is intentional, accept the risk from its row above and it moves here with the reason.
Latest collection 16 Oct 2026, 04:00 UTC. Severity, check and first-seen filters, sorting and hidden columns stay in the address, so a saved view or a download shows the same rows.