Files
ConditionalAccessBaseline/Config/ConditionalAccess/CA101-Admins-IdentityProtection-AnyApp-AnyPlatform-MFA.json
j0eyv 55ee357881 2026.6.1
2026.6.1
2026-06-11 14:44:07 +02:00

149 lines
20 KiB
JSON

{
"@odata.context": "https://graph.microsoft.com/beta/$metadata#identity/conditionalAccess/policies/$entity",
"@odata.type": "#microsoft.graph.conditionalAccessPolicy",
"@odata.id": "identity/conditionalAccess/policies(\u002786c4a58a-4cfd-4cdd-882e-c6e15b0ec5e7\u0027)",
"@odata.editLink": "identity/conditionalAccess/policies(\u002786c4a58a-4cfd-4cdd-882e-c6e15b0ec5e7\u0027)",
"id": "86c4a58a-4cfd-4cdd-882e-c6e15b0ec5e7",
"templateId": null,
"displayName": "CA101-Admins-IdentityProtection-AnyApp-AnyPlatform-MFA",
"createdDateTime@odata.type": "#DateTimeOffset",
"createdDateTime": "2024-05-24T09:27:59.650288Z",
"modifiedDateTime@odata.type": "#DateTimeOffset",
"modifiedDateTime": "2026-06-08T18:10:53.4270262Z",
"state@odata.type": "#microsoft.graph.conditionalAccessPolicyState",
"state": "enabled",
"deletedDateTime": null,
"partialEnablementStrategy": null,
"sessionControls": null,
"conditions": {
"@odata.type": "#microsoft.graph.conditionalAccessConditionSet",
"userRiskLevels@odata.type": "#Collection(microsoft.graph.riskLevel)",
"userRiskLevels": [
],
"signInRiskLevels@odata.type": "#Collection(microsoft.graph.riskLevel)",
"signInRiskLevels": [
],
"clientAppTypes@odata.type": "#Collection(microsoft.graph.conditionalAccessClientApp)",
"clientAppTypes": [
"browser",
"mobileAppsAndDesktopClients"
],
"platforms": null,
"times": null,
"deviceStates": null,
"devices": null,
"clientApplications": null,
"agents": null,
"applications": {
"@odata.type": "#microsoft.graph.conditionalAccessApplications",
"includeApplications@odata.type": "#Collection(String)",
"includeApplications": [
"All"
],
"excludeApplications@odata.type": "#Collection(String)",
"excludeApplications": [
],
"includeUserActions@odata.type": "#Collection(String)",
"includeUserActions": [
],
"includeAuthenticationContextClassReferences@odata.type": "#Collection(String)",
"includeAuthenticationContextClassReferences": [
],
"applicationFilter": null
},
"users": {
"@odata.type": "#microsoft.graph.conditionalAccessUsers",
"includeUsers@odata.type": "#Collection(String)",
"includeUsers": [
],
"excludeUsers@odata.type": "#Collection(String)",
"excludeUsers": [
],
"includeGroups@odata.type": "#Collection(String)",
"includeGroups": [
],
"excludeGroups@odata.type": "#Collection(String)",
"excludeGroups": [
"2802b872-ccfb-4b29-a9a9-459808dfb11b",
"8e75af29-5176-4372-a718-724b8a4620dc"
],
"includeRoles@odata.type": "#Collection(String)",
"includeRoles": [
"29232cdf-9323-42fd-ade2-1d097af3e4de",
"194ae4cb-b126-40b2-bd5b-6091b380977d",
"b1be1c3e-b65d-4f19-8427-f6fa0d97feb9",
"f28a1f50-f6e7-4571-818b-6a12f2af6b6c",
"729827e3-9c14-49f7-bb1b-9608f156bbb8",
"b0f54661-2d74-4c50-afa3-1ec803f12efe",
"fe930be7-5e62-47db-91af-98c3a49a38b1",
"c4e39bd9-1100-46d3-8c65-fb160da0071f",
"62e90394-69f5-4237-9190-012177145e10",
"f2ef992c-3afb-46b9-b7cf-a126ee74c451",
"3a2c62db-5318-420d-8d74-23affee5d9d5",
"9b895d92-2cd3-44c7-9d02-a6ac2d5ea5c3",
"158c047a-c907-4556-b7ef-446551a6b5f7",
"966707d0-3269-4727-9be2-8c3a10f19b9d",
"7be44c8a-adaf-4e2a-84d6-ab2649e08a13",
"e8611ab8-c189-46e8-94e1-60213ab1f814",
"b6a27b2b-f905-4b2e-81b5-0d90e0ef1fdb",
"11451d60-acb2-45eb-a7d6-43d0f0125c13",
"69091246-20e8-4a56-aa4d-066075b2a7a8",
"d2562ede-74db-457e-a7b6-544e236ebb61",
"6b942400-691f-4bf0-9d12-d8a254a2baf5",
"db506228-d27e-4b7d-95e5-295956d6615f",
"e93e3737-fa85-474a-aee4-7d3fb86510f3",
"1707125e-0aa2-4d4d-8655-a7c786c76a25"
],
"excludeRoles@odata.type": "#Collection(String)",
"excludeRoles": [
],
"includeGuestsOrExternalUsers": null,
"excludeGuestsOrExternalUsers": null
},
"locations": {
"@odata.type": "#microsoft.graph.conditionalAccessLocations",
"includeLocations@odata.type": "#Collection(String)",
"includeLocations": [
"All"
],
"excludeLocations@odata.type": "#Collection(String)",
"excludeLocations": [
]
}
},
"grantControls": {
"@odata.type": "#microsoft.graph.conditionalAccessGrantControls",
"operator": "OR",
"builtInControls@odata.type": "#Collection(microsoft.graph.conditionalAccessGrantControl)",
"builtInControls": [
"mfa"
],
"customAuthenticationFactors@odata.type": "#Collection(String)",
"customAuthenticationFactors": [
],
"termsOfUse@odata.type": "#Collection(String)",
"termsOfUse": [
],
"authenticationStrength@odata.context": "https://graph.microsoft.com/beta/$metadata#identity/conditionalAccess/policies(\u002786c4a58a-4cfd-4cdd-882e-c6e15b0ec5e7\u0027)/grantControls/authenticationStrength/$entity",
"authenticationStrength@odata.associationLink": "https://graph.microsoft.com/beta/identity/conditionalAccess/policies(\u002786c4a58a-4cfd-4cdd-882e-c6e15b0ec5e7\u0027)/grantControls/authenticationStrength/$ref",
"authenticationStrength@odata.navigationLink": "https://graph.microsoft.com/beta/identity/conditionalAccess/policies(\u002786c4a58a-4cfd-4cdd-882e-c6e15b0ec5e7\u0027)/grantControls/authenticationStrength",
"authenticationStrength": null
},
"#microsoft.graph.restore": {
"title": "microsoft.graph.restore",
"target": "https://graph.microsoft.com/beta/identity/conditionalAccess/policies(\u002786c4a58a-4cfd-4cdd-882e-c6e15b0ec5e7\u0027)/microsoft.graph.restore"
}
}