-
Notifications
You must be signed in to change notification settings - Fork 0
/
Copy path🚦🟢CA MFA & PassChange for User Risk.json
107 lines (97 loc) · 13.3 KB
/
🚦🟢CA MFA & PassChange for User Risk.json
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
93
94
95
96
97
98
99
100
101
102
103
104
105
106
107
{
"@odata.context": "https://graph.microsoft.com/beta/$metadata#identity/conditionalAccess/policies/$entity",
"@odata.type": "#microsoft.graph.conditionalAccessPolicy",
"@odata.id": "identity/conditionalAccess/policies(\u0027b6788225-a43d-4edb-bd8a-cd201b2f9ff9\u0027)",
"@odata.editLink": "identity/conditionalAccess/policies(\u0027b6788225-a43d-4edb-bd8a-cd201b2f9ff9\u0027)",
"id": "b6788225-a43d-4edb-bd8a-cd201b2f9ff9",
"templateId": null,
"displayName": "🚦🟢CA: MFA \u0026 PassChange for User Risk",
"[email protected]": "#DateTimeOffset",
"createdDateTime": "2024-07-12T20:42:57.5549496Z",
"modifiedDateTime": null,
"[email protected]": "#microsoft.graph.conditionalAccessPolicyState",
"state": "enabledForReportingButNotEnforced",
"partialEnablementStrategy": null,
"sessionControls": null,
"conditions": {
"@odata.type": "#microsoft.graph.conditionalAccessConditionSet",
"[email protected]": "#Collection(microsoft.graph.riskLevel)",
"userRiskLevels": [
"high"
],
"[email protected]": "#Collection(microsoft.graph.riskLevel)",
"signInRiskLevels": [
],
"[email protected]": "#Collection(microsoft.graph.conditionalAccessClientApp)",
"clientAppTypes": [
"all"
],
"platforms": null,
"locations": null,
"times": null,
"deviceStates": null,
"devices": null,
"clientApplications": null,
"applications": {
"@odata.type": "#microsoft.graph.conditionalAccessApplications",
"[email protected]": "#Collection(String)",
"includeApplications": [
"All"
],
"[email protected]": "#Collection(String)",
"excludeApplications": [
],
"[email protected]": "#Collection(String)",
"includeUserActions": [
],
"[email protected]": "#Collection(String)",
"includeAuthenticationContextClassReferences": [
],
"applicationFilter": null
},
"users": {
"@odata.type": "#microsoft.graph.conditionalAccessUsers",
"[email protected]": "#Collection(String)",
"includeUsers": [
"All"
],
"[email protected]": "#Collection(String)",
"excludeUsers": [
],
"[email protected]": "#Collection(String)",
"includeGroups": [
],
"[email protected]": "#Collection(String)",
"excludeGroups": [
"91c5dcc1-08ed-43b7-80cb-b9f725b96cad"
],
"[email protected]": "#Collection(String)",
"includeRoles": [
],
"[email protected]": "#Collection(String)",
"excludeRoles": [
],
"includeGuestsOrExternalUsers": null,
"excludeGuestsOrExternalUsers": null
}
},
"grantControls": {
"@odata.type": "#microsoft.graph.conditionalAccessGrantControls",
"operator": "AND",
"[email protected]": "#Collection(microsoft.graph.conditionalAccessGrantControl)",
"builtInControls": [
"mfa",
"passwordChange"
],
"[email protected]": "#Collection(String)",
"customAuthenticationFactors": [
],
"[email protected]": "#Collection(String)",
"termsOfUse": [
],
"[email protected]": "https://graph.microsoft.com/beta/$metadata#identity/conditionalAccess/policies(\u0027b6788225-a43d-4edb-bd8a-cd201b2f9ff9\u0027)/grantControls/authenticationStrength/$entity",
"[email protected]": "https://graph.microsoft.com/beta/identity/conditionalAccess/policies(\u0027b6788225-a43d-4edb-bd8a-cd201b2f9ff9\u0027)/grantControls/authenticationStrength/$ref",
"[email protected]": "https://graph.microsoft.com/beta/identity/conditionalAccess/policies(\u0027b6788225-a43d-4edb-bd8a-cd201b2f9ff9\u0027)/grantControls/authenticationStrength",
"authenticationStrength": null
}
}