Files
ConditionalAccessBaseline/Config/ConditionalAccess/CA504-Agents-IdentityProtection-AllAgentUsers-AllResources-BlockRiskyAgents.json
j0eyv 55ee357881 2026.6.1
2026.6.1
2026-06-11 14:44:07 +02:00

126 lines
16 KiB
JSON

{
"@odata.context": "https://graph.microsoft.com/beta/$metadata#identity/conditionalAccess/policies/$entity",
"@odata.type": "#microsoft.graph.conditionalAccessPolicy",
"@odata.id": "identity/conditionalAccess/policies(\u00274a0ed243-13ef-4ca0-bf7b-c457fe5c816a\u0027)",
"@odata.editLink": "identity/conditionalAccess/policies(\u00274a0ed243-13ef-4ca0-bf7b-c457fe5c816a\u0027)",
"id": "4a0ed243-13ef-4ca0-bf7b-c457fe5c816a",
"templateId": null,
"displayName": "CA504-Agents-IdentityProtection-AllAgentUsers-AllResources-BlockRiskyAgents",
"createdDateTime@odata.type": "#DateTimeOffset",
"createdDateTime": "2026-06-10T19:42:42.2713475Z",
"modifiedDateTime": null,
"state@odata.type": "#microsoft.graph.conditionalAccessPolicyState",
"state": "enabledForReportingButNotEnforced",
"deletedDateTime": null,
"partialEnablementStrategy": null,
"sessionControls": null,
"conditions": {
"@odata.type": "#microsoft.graph.conditionalAccessConditionSet",
"userRiskLevels@odata.type": "#Collection(microsoft.graph.riskLevel)",
"userRiskLevels": [
],
"signInRiskLevels@odata.type": "#Collection(microsoft.graph.riskLevel)",
"signInRiskLevels": [
],
"clientAppTypes@odata.type": "#Collection(microsoft.graph.conditionalAccessClientApp)",
"clientAppTypes": [
"all"
],
"agentIdRiskLevels@odata.type": "#microsoft.graph.conditionalAccessAgentIdRiskLevels",
"agentIdRiskLevels": "medium,high",
"platforms": null,
"locations": null,
"times": null,
"deviceStates": null,
"devices": null,
"clientApplications": null,
"applications": {
"@odata.type": "#microsoft.graph.conditionalAccessApplications",
"includeApplications@odata.type": "#Collection(String)",
"includeApplications": [
"All"
],
"excludeApplications@odata.type": "#Collection(String)",
"excludeApplications": [
],
"includeUserActions@odata.type": "#Collection(String)",
"includeUserActions": [
],
"includeAuthenticationContextClassReferences@odata.type": "#Collection(String)",
"includeAuthenticationContextClassReferences": [
],
"applicationFilter": null
},
"users": {
"@odata.type": "#microsoft.graph.conditionalAccessUsers",
"includeUsers@odata.type": "#Collection(String)",
"includeUsers": [
"None"
],
"excludeUsers@odata.type": "#Collection(String)",
"excludeUsers": [
],
"includeGroups@odata.type": "#Collection(String)",
"includeGroups": [
],
"excludeGroups@odata.type": "#Collection(String)",
"excludeGroups": [
],
"includeRoles@odata.type": "#Collection(String)",
"includeRoles": [
],
"excludeRoles@odata.type": "#Collection(String)",
"excludeRoles": [
],
"includeGuestsOrExternalUsers": null,
"excludeGuestsOrExternalUsers": null
},
"agents": {
"@odata.type": "#microsoft.graph.conditionalAccessAgents",
"includeAgentUsers@odata.type": "#Collection(String)",
"includeAgentUsers": [
"All"
],
"excludeAgentUsers@odata.type": "#Collection(String)",
"excludeAgentUsers": [
],
"agentFilter": null
}
},
"grantControls": {
"@odata.type": "#microsoft.graph.conditionalAccessGrantControls",
"operator": "OR",
"builtInControls@odata.type": "#Collection(microsoft.graph.conditionalAccessGrantControl)",
"builtInControls": [
"block"
],
"customAuthenticationFactors@odata.type": "#Collection(String)",
"customAuthenticationFactors": [
],
"termsOfUse@odata.type": "#Collection(String)",
"termsOfUse": [
],
"authenticationStrength@odata.context": "https://graph.microsoft.com/beta/$metadata#identity/conditionalAccess/policies(\u00274a0ed243-13ef-4ca0-bf7b-c457fe5c816a\u0027)/grantControls/authenticationStrength/$entity",
"authenticationStrength@odata.associationLink": "https://graph.microsoft.com/beta/identity/conditionalAccess/policies(\u00274a0ed243-13ef-4ca0-bf7b-c457fe5c816a\u0027)/grantControls/authenticationStrength/$ref",
"authenticationStrength@odata.navigationLink": "https://graph.microsoft.com/beta/identity/conditionalAccess/policies(\u00274a0ed243-13ef-4ca0-bf7b-c457fe5c816a\u0027)/grantControls/authenticationStrength",
"authenticationStrength": null
},
"#microsoft.graph.restore": {
"title": "microsoft.graph.restore",
"target": "https://graph.microsoft.com/beta/identity/conditionalAccess/policies(\u00274a0ed243-13ef-4ca0-bf7b-c457fe5c816a\u0027)/microsoft.graph.restore"
}
}