{
    "@odata.context":  "https://graph.microsoft.com/beta/$metadata#identity/conditionalAccess/policies/$entity",
    "@odata.type":  "#microsoft.graph.conditionalAccessPolicy",
    "@odata.id":  "identity/conditionalAccess/policies(\u00274a0ed243-13ef-4ca0-bf7b-c457fe5c816a\u0027)",
    "@odata.editLink":  "identity/conditionalAccess/policies(\u00274a0ed243-13ef-4ca0-bf7b-c457fe5c816a\u0027)",
    "id":  "4a0ed243-13ef-4ca0-bf7b-c457fe5c816a",
    "templateId":  null,
    "displayName":  "CA504-Agents-IdentityProtection-AllAgentUsers-AllResources-BlockRiskyAgents",
    "createdDateTime@odata.type":  "#DateTimeOffset",
    "createdDateTime":  "2026-06-10T19:42:42.2713475Z",
    "modifiedDateTime":  null,
    "state@odata.type":  "#microsoft.graph.conditionalAccessPolicyState",
    "state":  "enabledForReportingButNotEnforced",
    "deletedDateTime":  null,
    "partialEnablementStrategy":  null,
    "sessionControls":  null,
    "conditions":  {
                       "@odata.type":  "#microsoft.graph.conditionalAccessConditionSet",
                       "userRiskLevels@odata.type":  "#Collection(microsoft.graph.riskLevel)",
                       "userRiskLevels":  [

                                          ],
                       "signInRiskLevels@odata.type":  "#Collection(microsoft.graph.riskLevel)",
                       "signInRiskLevels":  [

                                            ],
                       "clientAppTypes@odata.type":  "#Collection(microsoft.graph.conditionalAccessClientApp)",
                       "clientAppTypes":  [
                                              "all"
                                          ],
                       "agentIdRiskLevels@odata.type":  "#microsoft.graph.conditionalAccessAgentIdRiskLevels",
                       "agentIdRiskLevels":  "medium,high",
                       "platforms":  null,
                       "locations":  null,
                       "times":  null,
                       "deviceStates":  null,
                       "devices":  null,
                       "clientApplications":  null,
                       "applications":  {
                                            "@odata.type":  "#microsoft.graph.conditionalAccessApplications",
                                            "includeApplications@odata.type":  "#Collection(String)",
                                            "includeApplications":  [
                                                                        "All"
                                                                    ],
                                            "excludeApplications@odata.type":  "#Collection(String)",
                                            "excludeApplications":  [

                                                                    ],
                                            "includeUserActions@odata.type":  "#Collection(String)",
                                            "includeUserActions":  [

                                                                   ],
                                            "includeAuthenticationContextClassReferences@odata.type":  "#Collection(String)",
                                            "includeAuthenticationContextClassReferences":  [

                                                                                            ],
                                            "applicationFilter":  null
                                        },
                       "users":  {
                                     "@odata.type":  "#microsoft.graph.conditionalAccessUsers",
                                     "includeUsers@odata.type":  "#Collection(String)",
                                     "includeUsers":  [
                                                          "None"
                                                      ],
                                     "excludeUsers@odata.type":  "#Collection(String)",
                                     "excludeUsers":  [

                                                      ],
                                     "includeGroups@odata.type":  "#Collection(String)",
                                     "includeGroups":  [

                                                       ],
                                     "excludeGroups@odata.type":  "#Collection(String)",
                                     "excludeGroups":  [

                                                       ],
                                     "includeRoles@odata.type":  "#Collection(String)",
                                     "includeRoles":  [

                                                      ],
                                     "excludeRoles@odata.type":  "#Collection(String)",
                                     "excludeRoles":  [

                                                      ],
                                     "includeGuestsOrExternalUsers":  null,
                                     "excludeGuestsOrExternalUsers":  null
                                 },
                       "agents":  {
                                      "@odata.type":  "#microsoft.graph.conditionalAccessAgents",
                                      "includeAgentUsers@odata.type":  "#Collection(String)",
                                      "includeAgentUsers":  [
                                                                "All"
                                                            ],
                                      "excludeAgentUsers@odata.type":  "#Collection(String)",
                                      "excludeAgentUsers":  [

                                                            ],
                                      "agentFilter":  null
                                  }
                   },
    "grantControls":  {
                          "@odata.type":  "#microsoft.graph.conditionalAccessGrantControls",
                          "operator":  "OR",
                          "builtInControls@odata.type":  "#Collection(microsoft.graph.conditionalAccessGrantControl)",
                          "builtInControls":  [
                                                  "block"
                                              ],
                          "customAuthenticationFactors@odata.type":  "#Collection(String)",
                          "customAuthenticationFactors":  [

                                                          ],
                          "termsOfUse@odata.type":  "#Collection(String)",
                          "termsOfUse":  [

                                         ],
                          "authenticationStrength@odata.context":  "https://graph.microsoft.com/beta/$metadata#identity/conditionalAccess/policies(\u00274a0ed243-13ef-4ca0-bf7b-c457fe5c816a\u0027)/grantControls/authenticationStrength/$entity",
                          "authenticationStrength@odata.associationLink":  "https://graph.microsoft.com/beta/identity/conditionalAccess/policies(\u00274a0ed243-13ef-4ca0-bf7b-c457fe5c816a\u0027)/grantControls/authenticationStrength/$ref",
                          "authenticationStrength@odata.navigationLink":  "https://graph.microsoft.com/beta/identity/conditionalAccess/policies(\u00274a0ed243-13ef-4ca0-bf7b-c457fe5c816a\u0027)/grantControls/authenticationStrength",
                          "authenticationStrength":  null
                      },
    "#microsoft.graph.restore":  {
                                     "title":  "microsoft.graph.restore",
                                     "target":  "https://graph.microsoft.com/beta/identity/conditionalAccess/policies(\u00274a0ed243-13ef-4ca0-bf7b-c457fe5c816a\u0027)/microsoft.graph.restore"
                                 }
}