microsoft.conditionalAccess.policy.conditions
Description
Represents the type of conditions that govern when the policy applies.
Fields
ID | TYPE | DESCRIPTION |
---|---|---|
id | string | Internal ID based on policy ID |
applications | microsoft.conditionalAccess.policy.conditions.applications | Applications and user actions included in and excluded from the policy. |
authenticationFlows | microsoft.conditionalAccess.policy.conditions.authenticationFlows | Authentication flows included in the policy scope. |
clientApplications | microsoft.conditionalAccess.policy.conditions.clientApplications | Client applications (service principals and workload identities) included in and excluded from the policy. Either users or clientApplications is required. |
clientAppTypes | []string | Client application types included in the policy. |
locations | microsoft.conditionalAccess.policy.conditions.locations | Locations included in and excluded from the policy. |
platforms | microsoft.conditionalAccess.policy.conditions.platforms | Platforms included in and excluded from the policy. |
servicePrincipalRiskLevels | []string | Service principal risk levels included in the policy. Possible values are: low, medium, high, none, unknownFutureValue. |
signInRiskLevels | []string | Sign-in risk levels included in the policy. Possible values are: low, medium, high, hidden, none, unknownFutureValue. |
userRiskLevels | []string | User risk levels included in the policy. Possible values are: low, medium, high, hidden, none, unknownFutureValue. |
users | microsoft.conditionalAccess.policy.conditions.users | Users, groups, and roles included in and excluded from the policy. Either users or clientApplications is required. |
insiderRiskLevels | string | Insider risk levels included in the policy. The possible values are: minor, moderate, elevated, unknownFutureValue. |