Skip to main content

microsoft.conditionalAccess.policy.grantControls

Description

Represents grant controls that must be fulfilled to pass the policy.

Fields

IDTYPEDESCRIPTION
idstringInternal ID based on policy ID
operatorstringDefines the relationship of the grant controls. Possible values: AND, OR.
builtInControls[]stringList of values of built-in controls required by the policy., Possible values: block, mfa, compliantDevice, domainJoinedDevice, approvedApplication, compliantApplication, passwordChange, unknownFutureValue.
authenticationStrengthmicrosoft.conditionalAccess.policy.grantControls.authenticationStrengthThe authentication strength required by the conditional access policy. Optional.
customAuthenticationFactors[]stringList of custom controls IDs required by the policy.
termsOfUse[]stringList of terms of use IDs required by the policy.