From 46f734ade5cfd9e5c99ea770a34a76909331b36c Mon Sep 17 00:00:00 2001 From: Joey vldn <41282854+j0eyv@users.noreply.github.com> Date: Fri, 3 Jul 2026 09:38:52 +0200 Subject: [PATCH] Update and rename CA005-Global-DataProtection-Office365-AnyPlatform-Unmanaged-RequireAppProtection.json to CA005-Global-DataProtection-Office365-iOSenAndroid-ClientApps-Unmanaged-AppEnforcedRestrictions.json --- ...atform-Unmanaged-RequireAppProtection.json | Bin 21430 -> 0 bytes ...pps-Unmanaged-AppEnforcedRestrictions.json | 162 ++++++++++++++++++ 2 files changed, 162 insertions(+) delete mode 100644 Config/ConditionalAccess/CA005-Global-DataProtection-Office365-AnyPlatform-Unmanaged-RequireAppProtection.json create mode 100644 Config/ConditionalAccess/CA005-Global-DataProtection-Office365-iOSenAndroid-ClientApps-Unmanaged-AppEnforcedRestrictions.json diff --git a/Config/ConditionalAccess/CA005-Global-DataProtection-Office365-AnyPlatform-Unmanaged-RequireAppProtection.json b/Config/ConditionalAccess/CA005-Global-DataProtection-Office365-AnyPlatform-Unmanaged-RequireAppProtection.json deleted file mode 100644 index 4edae9112cc1e9fd042032c4d189ef3be082df30..0000000000000000000000000000000000000000 GIT binary patch literal 0 HcmV?d00001 literal 21430 zcmezWubP3Efr~)_3Y8cf81flX7!nyu7!n!u7?K(C8S)rP7*ZK37)ltF7_7kRlo&D? zN*GEQ3K)tRtQhne^cm6_iWm|Z3K%jN^cZp(G8vK?iWu@4iW%}5(ilph=HxQyGbAyj zf=$+EP+`c0vSGF0lE{$5;K-27kj#+EP|Q%w zpwCdikk60!4kzxO@jVPWq^c`4?`wH z9z!-#2oGgHg4~XXEoy}&)N?P7|gKx(x0NISly>NerMIrOV&~wk44v0Gx9{b|*8GFhKI0E`vWq z8bca5kEJpgGng@e^gA--F;p@HK;4(dkk3%WkjtRU5Xz9pkjs$BkjIe7kj?-~1G)@B z45#Qh>;lz= zpn4YMUQkU6GC!RGRC7RTTwEq%)R0c$er$Mj< zP=sL@W_<{AA$}Ua`(bG+8r+6KZmZ!pl{DE{w3>uC-AW9_44Dk+40#Nm40%H~^a=Ta zJ~03aadKlJ8QlH_m0cy!x;2EMk^$7FrCs{REO|g>8gk3r8N*fN=Ma28M2#O%IMNC$ zF(iRoN9EA+2EBfug}q7)pc*@gAro9DL0V4544}3bsQv-8(RFl=#xI*I^t5jC+A zxQ`4<9i`w=5M1sc+=9m5o&lv~P@5%>A)SHTa+rAk66+gSo`SS)h&P`;DwVMGdzHZL zF#6a}*cS3y41~>vsZaus{0*N}2^z;F>>JcnNvnDk7RIE|w2yDlNF5@CLZK}kP`eJ+ zS0leoIk06AcE1ePxTbeZJ2I3qlrUt#$KR1#YM>eg)Q$kE%I3=D`*3?8w83R#E`}BvsHR%TK>43(+ir^zzuogEhO5$2FM?PR!bhm7 z6w_{UOL@vyxwwE=p@8PfQZZJ^(Q*a`y$_2SCa@d|>9N4Vav*6X@Or@%a8CoWzLHic zhIC(o!qcB2ctF}isIH}c4Gc3My+4kbW=3K@Lak>o!vr-SQKvS6#R%ziER|;_$*tEw z{R!Cm2~gP&86BZTokpMf47nT!`G*!I6R3;<&7kBkKxY4u?F7x5f!Ya!xz7Sht;G6a zaOE0W^f@7+fm(VD%@`%l4;C#PQ`!P>BX9p&_lofvUx5)3!lx*9@gN z!=3krdz>M+Ah68`)1oZ_Dzk~h^l5dV`kNMQ4&rwAzc6}p!Kz{yI0`E-#jT3|VFrYo6u;$g!jJS3QNky{RsIN7P63*9Imp2n&L{}9r~zc4)&Gnv@ahhX+eVg z0b0=o+DVhkfNw3N8$%*^pCBkD4~AAhxh_XdD?_o>58C+yDpzvBGg4{L87Ok|JZO}K zI{PEAyNe#-O<4{|#Iphz5;~wAhUwr{!l259+rd#`0jXMX3uwYn1cB^GJ}EILODz45bX9)(xm6g~b-N z>;w4^b_RqScrOs>q#uZH37ud93Nuo$68KbuBJjBrpz~Wmwv;e9f!7TncI87xNT}sM zSnCEf`d`Wb3R%$pd&CK3t_)@1Gn7h^%1r8qG3ay>P#mT*1S6ff0g78hYNocWiQsdZ zKxr3wHyG&L8pxU@P-;#ApX~&S3sCw(oS=e8*OZkCq@)gF)Ka6Ap)6cb;|#SdrKFA^ z#`mPE0nHp0Gk{_oR-z%!AS;26D3V&ckm?3v)RQuHhcFMbo+EtnAEO6{QjKVmeN z+G!lrhXkE@2s&#Dma9Rd@SxRXpdJL`WJTn&vC!Q{SxtfnCm0LlD$og5pi|wbdm7|W TYV8x6;XscC>f{ed3WtyYmxrw4 diff --git a/Config/ConditionalAccess/CA005-Global-DataProtection-Office365-iOSenAndroid-ClientApps-Unmanaged-AppEnforcedRestrictions.json b/Config/ConditionalAccess/CA005-Global-DataProtection-Office365-iOSenAndroid-ClientApps-Unmanaged-AppEnforcedRestrictions.json new file mode 100644 index 0000000..f9b74c7 --- /dev/null +++ b/Config/ConditionalAccess/CA005-Global-DataProtection-Office365-iOSenAndroid-ClientApps-Unmanaged-AppEnforcedRestrictions.json @@ -0,0 +1,162 @@ +{ + "@odata.context": "https://graph.microsoft.com/beta/$metadata#identity/conditionalAccess/policies/$entity", + "@odata.type": "#microsoft.graph.conditionalAccessPolicy", + "@odata.id": "identity/conditionalAccess/policies(\u00274192875f-8b4c-4bc6-b797-f7629f71c709\u0027)", + "@odata.editLink": "identity/conditionalAccess/policies(\u00274192875f-8b4c-4bc6-b797-f7629f71c709\u0027)", + "id": "4192875f-8b4c-4bc6-b797-f7629f71c709", + "templateId": null, + "displayName": "CA005-Global-DataProtection-Office365-iOSenAndroid-ClientApps-Unmanaged-AppEnforcedRestrictions", + "createdDateTime@odata.type": "#DateTimeOffset", + "createdDateTime": "2026-02-13T13:21:01.0192067Z", + "modifiedDateTime@odata.type": "#DateTimeOffset", + "modifiedDateTime": "2026-02-13T13:28:15.6527415Z", + "state@odata.type": "#microsoft.graph.conditionalAccessPolicyState", + "state": "enabled", + "deletedDateTime": null, + "partialEnablementStrategy": null, + "conditions": { + "@odata.type": "#microsoft.graph.conditionalAccessConditionSet", + "userRiskLevels@odata.type": "#Collection(microsoft.graph.riskLevel)", + "userRiskLevels": [ + + ], + "signInRiskLevels@odata.type": "#Collection(microsoft.graph.riskLevel)", + "signInRiskLevels": [ + + ], + "clientAppTypes@odata.type": "#Collection(microsoft.graph.conditionalAccessClientApp)", + "clientAppTypes": [ + "browser", + "mobileAppsAndDesktopClients" + ], + "locations": null, + "times": null, + "deviceStates": null, + "clientApplications": null, + "agents": null, + "applications": { + "@odata.type": "#microsoft.graph.conditionalAccessApplications", + "includeApplications@odata.type": "#Collection(String)", + "includeApplications": [ + "Office365" + ], + "excludeApplications@odata.type": "#Collection(String)", + "excludeApplications": [ + + ], + "includeUserActions@odata.type": "#Collection(String)", + "includeUserActions": [ + + ], + "includeAuthenticationContextClassReferences@odata.type": "#Collection(String)", + "includeAuthenticationContextClassReferences": [ + + ], + "applicationFilter": null + }, + "users": { + "@odata.type": "#microsoft.graph.conditionalAccessUsers", + "includeUsers@odata.type": "#Collection(String)", + "includeUsers": [ + "All" + ], + "excludeUsers@odata.type": "#Collection(String)", + "excludeUsers": [ + + ], + "includeGroups@odata.type": "#Collection(String)", + "includeGroups": [ + + ], + "excludeGroups@odata.type": "#Collection(String)", + "excludeGroups": [ + "2802b872-ccfb-4b29-a9a9-459808dfb11b", + "20cd89e3-25e2-4fcd-82c5-de666dfd31a4" + ], + "includeRoles@odata.type": "#Collection(String)", + "includeRoles": [ + + ], + "excludeRoles@odata.type": "#Collection(String)", + "excludeRoles": [ + + ], + "includeGuestsOrExternalUsers": null, + "excludeGuestsOrExternalUsers": null + }, + "platforms": { + "@odata.type": "#microsoft.graph.conditionalAccessPlatforms", + "includePlatforms@odata.type": "#Collection(microsoft.graph.conditionalAccessDevicePlatform)", + "includePlatforms": [ + "android", + "iOS" + ], + "excludePlatforms@odata.type": "#Collection(microsoft.graph.conditionalAccessDevicePlatform)", + "excludePlatforms": [ + + ] + }, + "devices": { + "@odata.type": "#microsoft.graph.conditionalAccessDevices", + "includeDeviceStates@odata.type": "#Collection(String)", + "includeDeviceStates": [ + + ], + "excludeDeviceStates@odata.type": "#Collection(String)", + "excludeDeviceStates": [ + + ], + "includeDevices@odata.type": "#Collection(String)", + "includeDevices": [ + + ], + "excludeDevices@odata.type": "#Collection(String)", + "excludeDevices": [ + + ], + "deviceFilter": { + "@odata.type": "#microsoft.graph.conditionalAccessFilter", + "mode@odata.type": "#microsoft.graph.filterMode", + "mode": "exclude", + "rule": "device.isCompliant -eq True -and device.deviceOwnership -eq \"Company\"" + } + } + }, + "grantControls": { + "@odata.type": "#microsoft.graph.conditionalAccessGrantControls", + "operator": "OR", + "builtInControls@odata.type": "#Collection(microsoft.graph.conditionalAccessGrantControl)", + "builtInControls": [ + "compliantApplication" + ], + "customAuthenticationFactors@odata.type": "#Collection(String)", + "customAuthenticationFactors": [ + + ], + "termsOfUse@odata.type": "#Collection(String)", + "termsOfUse": [ + + ], + "authenticationStrength@odata.context": "https://graph.microsoft.com/beta/$metadata#identity/conditionalAccess/policies(\u00274192875f-8b4c-4bc6-b797-f7629f71c709\u0027)/grantControls/authenticationStrength/$entity", + "authenticationStrength@odata.associationLink": "https://graph.microsoft.com/beta/identity/conditionalAccess/policies(\u00274192875f-8b4c-4bc6-b797-f7629f71c709\u0027)/grantControls/authenticationStrength/$ref", + "authenticationStrength@odata.navigationLink": "https://graph.microsoft.com/beta/identity/conditionalAccess/policies(\u00274192875f-8b4c-4bc6-b797-f7629f71c709\u0027)/grantControls/authenticationStrength", + "authenticationStrength": null + }, + "sessionControls": { + "@odata.type": "#microsoft.graph.conditionalAccessSessionControls", + "disableResilienceDefaults": null, + "cloudAppSecurity": null, + "signInFrequency": null, + "persistentBrowser": null, + "continuousAccessEvaluation": null, + "secureSignInSession": null, + "applicationEnforcedRestrictions": { + "@odata.type": "#microsoft.graph.applicationEnforcedRestrictionsSessionControl", + "isEnabled": true + } + }, + "#microsoft.graph.restore": { + "title": "microsoft.graph.restore", + "target": "https://graph.microsoft.com/beta/identity/conditionalAccess/policies(\u00274192875f-8b4c-4bc6-b797-f7629f71c709\u0027)/microsoft.graph.restore" + } +}