mirror of
https://github.com/j0eyv/ConditionalAccessBaseline.git
synced 2026-09-28 10:25:38 +02:00
143 lines
18 KiB
JSON
143 lines
18 KiB
JSON
{
|
|
"@odata.context": "https://graph.microsoft.com/beta/$metadata#identity/conditionalAccess/policies/$entity",
|
|
"@odata.type": "#microsoft.graph.conditionalAccessPolicy",
|
|
"@odata.id": "identity/conditionalAccess/policies(\u0027f1cedeec-d6a4-49c4-a8b9-cf6c43a6f16e\u0027)",
|
|
"@odata.editLink": "identity/conditionalAccess/policies(\u0027f1cedeec-d6a4-49c4-a8b9-cf6c43a6f16e\u0027)",
|
|
"id": "f1cedeec-d6a4-49c4-a8b9-cf6c43a6f16e",
|
|
"templateId": null,
|
|
"displayName": "CA202-Internals-IdentityProtection-AllApps-WindowsMacOS-SigninFrequency-UnmanagedDevices",
|
|
"createdDateTime@odata.type": "#DateTimeOffset",
|
|
"createdDateTime": "2024-05-24T09:28:04.3791858Z",
|
|
"modifiedDateTime@odata.type": "#DateTimeOffset",
|
|
"modifiedDateTime": "2024-06-21T07:05:14.5341609Z",
|
|
"state@odata.type": "#microsoft.graph.conditionalAccessPolicyState",
|
|
"state": "enabled",
|
|
"grantControls": null,
|
|
"partialEnablementStrategy": null,
|
|
"conditions": {
|
|
"@odata.type": "#microsoft.graph.conditionalAccessConditionSet",
|
|
"userRiskLevels@odata.type": "#Collection(microsoft.graph.riskLevel)",
|
|
"userRiskLevels": [
|
|
|
|
],
|
|
"signInRiskLevels@odata.type": "#Collection(microsoft.graph.riskLevel)",
|
|
"signInRiskLevels": [
|
|
|
|
],
|
|
"clientAppTypes@odata.type": "#Collection(microsoft.graph.conditionalAccessClientApp)",
|
|
"clientAppTypes": [
|
|
"all"
|
|
],
|
|
"locations": null,
|
|
"times": null,
|
|
"deviceStates": null,
|
|
"clientApplications": null,
|
|
"applications": {
|
|
"@odata.type": "#microsoft.graph.conditionalAccessApplications",
|
|
"includeApplications@odata.type": "#Collection(String)",
|
|
"includeApplications": [
|
|
"All"
|
|
],
|
|
"excludeApplications@odata.type": "#Collection(String)",
|
|
"excludeApplications": [
|
|
|
|
],
|
|
"includeUserActions@odata.type": "#Collection(String)",
|
|
"includeUserActions": [
|
|
|
|
],
|
|
"includeAuthenticationContextClassReferences@odata.type": "#Collection(String)",
|
|
"includeAuthenticationContextClassReferences": [
|
|
|
|
],
|
|
"applicationFilter": null
|
|
},
|
|
"users": {
|
|
"@odata.type": "#microsoft.graph.conditionalAccessUsers",
|
|
"includeUsers@odata.type": "#Collection(String)",
|
|
"includeUsers": [
|
|
|
|
],
|
|
"excludeUsers@odata.type": "#Collection(String)",
|
|
"excludeUsers": [
|
|
|
|
],
|
|
"includeGroups@odata.type": "#Collection(String)",
|
|
"includeGroups": [
|
|
"ceeac9b8-ddf5-48cb-afcb-e2ab8bfd1a57"
|
|
],
|
|
"excludeGroups@odata.type": "#Collection(String)",
|
|
"excludeGroups": [
|
|
"2802b872-ccfb-4b29-a9a9-459808dfb11b"
|
|
],
|
|
"includeRoles@odata.type": "#Collection(String)",
|
|
"includeRoles": [
|
|
|
|
],
|
|
"excludeRoles@odata.type": "#Collection(String)",
|
|
"excludeRoles": [
|
|
|
|
],
|
|
"includeGuestsOrExternalUsers": null,
|
|
"excludeGuestsOrExternalUsers": null
|
|
},
|
|
"platforms": {
|
|
"@odata.type": "#microsoft.graph.conditionalAccessPlatforms",
|
|
"includePlatforms@odata.type": "#Collection(microsoft.graph.conditionalAccessDevicePlatform)",
|
|
"includePlatforms": [
|
|
"windows",
|
|
"macOS"
|
|
],
|
|
"excludePlatforms@odata.type": "#Collection(microsoft.graph.conditionalAccessDevicePlatform)",
|
|
"excludePlatforms": [
|
|
|
|
]
|
|
},
|
|
"devices": {
|
|
"@odata.type": "#microsoft.graph.conditionalAccessDevices",
|
|
"includeDeviceStates@odata.type": "#Collection(String)",
|
|
"includeDeviceStates": [
|
|
|
|
],
|
|
"excludeDeviceStates@odata.type": "#Collection(String)",
|
|
"excludeDeviceStates": [
|
|
|
|
],
|
|
"includeDevices@odata.type": "#Collection(String)",
|
|
"includeDevices": [
|
|
|
|
],
|
|
"excludeDevices@odata.type": "#Collection(String)",
|
|
"excludeDevices": [
|
|
|
|
],
|
|
"deviceFilter": {
|
|
"@odata.type": "#microsoft.graph.conditionalAccessFilter",
|
|
"mode@odata.type": "#microsoft.graph.filterMode",
|
|
"mode": "exclude",
|
|
"rule": "device.deviceOwnership -eq \"Company\" -or device.isCompliant -eq True"
|
|
}
|
|
}
|
|
},
|
|
"sessionControls": {
|
|
"@odata.type": "#microsoft.graph.conditionalAccessSessionControls",
|
|
"disableResilienceDefaults": null,
|
|
"applicationEnforcedRestrictions": null,
|
|
"cloudAppSecurity": null,
|
|
"persistentBrowser": null,
|
|
"continuousAccessEvaluation": null,
|
|
"secureSignInSession": null,
|
|
"signInFrequency": {
|
|
"@odata.type": "#microsoft.graph.signInFrequencySessionControl",
|
|
"value": 12,
|
|
"type@odata.type": "#microsoft.graph.signinFrequencyType",
|
|
"type": "hours",
|
|
"authenticationType@odata.type": "#microsoft.graph.signInFrequencyAuthenticationType",
|
|
"authenticationType": "primaryAndSecondaryAuthentication",
|
|
"frequencyInterval@odata.type": "#microsoft.graph.signInFrequencyInterval",
|
|
"frequencyInterval": "timeBased",
|
|
"isEnabled": true
|
|
}
|
|
}
|
|
}
|