Intune/Microsoft365/CCX/CCX-Azure-202505191541.md

# M365 Documentation

Date: 15:44 19.05.2025 Components: AzureAD Tenant: CareCentrix, Inc.

Contents

• Authentication Method Policies
  • Temporary Access Pass
  • Email
  • Text Message
• Organizational branding
• Conditional Access Policies
• Conditional Access Policies
  • CA - CCX - M365 - Block Unapproved Mobile Users
    • Metadata
    • Conditions
    • Grant Controls
    • Session Controls
  • CA - CCX - Global - Restrict Mobile Access to US
    • Metadata
    • Conditions
    • Grant Controls
    • Session Controls
  • CA - CCX - M365 - Grant Compliance Access- MacOS
    • Metadata
    • Conditions
    • Grant Controls
    • Session Controls
  • CA - CCX - Global - Block Linux External Access
    • Metadata
    • Conditions
    • Grant Controls
    • Session Controls
  • CA - CCX - M365 - Grant Hybrid Join Access - Windows
    • Metadata
    • Conditions
    • Grant Controls
    • Session Controls
  • CA - CCX - PAGlobalProtect - Require MFA
    • Metadata
    • Conditions
    • Grant Controls
    • Session Controls
  • CA - CCX - Intune Enrollment - Enforce MFA
    • Metadata
    • Conditions
    • Grant Controls
    • Session Controls
  • CA - CCX - M365 - Grant Compliance Access - AutoPilot
    • Metadata
    • Conditions
    • Grant Controls
    • Session Controls
  • ZZZ - CA - CCX - M365 - Grant O365 Calendar Access - iOS
    • Metadata
    • Conditions
    • Grant Controls
    • Session Controls
  • CA - CCX - MEM - Grant Compliance Access - Mobile
    • Metadata
    • Conditions
    • Grant Controls
    • Session Controls
  • CA - CCX - MEM - Autopilot Troubleshooting
    • Metadata
    • Conditions
    • Grant Controls
    • Session Controls
  • CA - CCX - CyberArk - Require MFA
    • Metadata
    • Conditions
    • Grant Controls
    • Session Controls
  • CA - CCX - Salesforce - Require MFA
    • Metadata
    • Conditions
    • Grant Controls
    • Session Controls
  • CA - CCX - M365 - Grant ABM Access
    • Metadata
    • Conditions
    • Grant Controls
    • Session Controls
  • CA - CCX - Global - Block access for unknown or unsupported device platform
    • Metadata
    • Conditions
    • Grant Controls
    • Session Controls
  • CA - CCX - Global - Block legacy authentication
    • Metadata
    • Conditions
    • Grant Controls
    • Session Controls
  • CCX - CA - Block Hourly Users from Connection outside of logonhours
    • Metadata
    • Conditions
    • Grant Controls
    • Session Controls
  • CA - CCX - M365 - Grant Compliance Access - Windows
    • Metadata
    • Conditions
    • Grant Controls
    • Session Controls
  • Microsoft-managed: Multifactor authentication for admins accessing Microsoft Admin Portals
    • Metadata
    • Conditions
    • Grant Controls
    • Session Controls
  • CA - CCX - Horizon VDI - Require MFA
    • Metadata
    • Conditions
    • Grant Controls
    • Session Controls
  • CA - CCX - MEM - Grant Compliance Access - App Protection - Mobile
    • Metadata
    • Conditions
    • Grant Controls
    • Session Controls
  • CA - CCX - Global - Restrict Desktop Access to US
    • Metadata
    • Conditions
    • Grant Controls
    • Session Controls
  • CA - CCX - Provider Portal - MFA POC - Require MFA
    • Metadata
    • Conditions
    • Grant Controls
    • Session Controls
  • CA - CCX - Nice - Require MFA
    • Metadata
    • Conditions
    • Grant Controls
    • Session Controls
  • CA - CCX - AWS - Require MFA
    • Metadata
    • Conditions
    • Grant Controls
    • Session Controls
  • CA - CCX - AWS - Require CCX Network/Devices
    • Metadata
    • Conditions
    • Grant Controls
    • Session Controls
  • CA - CCX - NICE - Require CCX Network/Devices
    • Metadata
    • Conditions
    • Grant Controls
    • Session Controls
  • CA - CCX - Provider Portal POC - Require MFA
    • Metadata
    • Conditions
    • Grant Controls
    • Session Controls
  • CA - CCX - Bitwarden - Require MFA and CCX Device
    • Metadata
    • Conditions
    • Grant Controls
    • Session Controls
  • CA - CCX - Proofpoint on Demand - Require MFA
    • Metadata
    • Conditions
    • Grant Controls
    • Session Controls
  • CA - CCX - Proofpoint Admin Portal - Require MFA
    • Metadata
    • Conditions
    • Grant Controls
    • Session Controls
  • CA - CCX - NICE - Require CCX Network/Devices - WFM Reporting
    • Metadata
    • Conditions
    • Grant Controls
    • Session Controls
  • Block TOR & Anonymous Proxies
    • Metadata
    • Conditions
    • Grant Controls
    • Session Controls
  • CA - CCX - Bitwarden - Require MFA and CCX IP
    • Metadata
    • Conditions
    • Grant Controls
    • Session Controls
  • Supplimental: Multifactor authentication for admins accessing Microsoft Admin Portals COPY
    • Metadata
    • Conditions
    • Grant Controls
    • Session Controls
  • CA - CCX - MEM - Remote Help
    • Metadata
    • Conditions
    • Grant Controls
    • Session Controls
  • Microsoft-managed: Multifactor authentication and reauthentication for risky sign-ins
    • Metadata
    • Conditions
    • Grant Controls
    • Session Controls
  • Block VPN IP Ranges
    • Metadata
    • Conditions
    • Grant Controls
    • Session Controls
  • CA - CCX - Global - Block Windows Phone Access
    • Metadata
    • Conditions
    • Grant Controls
    • Session Controls
  • Microsoft-managed: Block device code flow
    • Metadata
    • Conditions
    • Grant Controls
    • Session Controls
• PIM Directory Roles
  • Authentication Administrator
  • Intune Administrator
  • Compliance Administrator
  • Security Administrator
  • Global Reader
  • Cloud Device Administrator
  • Exchange Administrator
  • Password Administrator
• Directory Roles
  • Authentication Administrator
  • Intune Administrator
  • License Administrator
  • Teams Communications Administrator
  • Reports Reader
  • Compliance Administrator
  • Directory Readers
  • Global Reader
  • Global Administrator
  • Directory Synchronization Accounts
  • Attribute Assignment Administrator
  • Billing Administrator
  • User Administrator
  • User Experience Success Manager
  • Desktop Analytics Administrator
  • Teams Communications Support Engineer
  • Teams Administrator
  • Service Support Administrator
• Domains
• Identity Providers
• Organization
• AAD Policies
  • Mobility Management Policy
  • Permission Grant Policy
  • Token Issuance Policy
  • Security Defaults Policy
  • Continuous Access Evaluation Policy
  • Authorization Policy
  • Feature rollout policy
• Subscriptions

Authentication Method Policies

Authentication methods policies define authentication methods and the users that are allowed to use them to sign in and perform multi-factor authentication (MFA) in Azure Active Directory (Azure AD). Authentication methods policies that can be managed in Microsoft Graph include FIDO2 Security Keys and Passwordless Phone Sign-in with Microsoft Authenticator app.

Temporary Access Pass

Email

Text Message

Organizational branding

Organizations can customize their Azure AD sign-in pages which appear when users sign in to their organization's tenant-specific apps, or when Azure AD identifies the user's tenant from their username. A developer can also read the company's branding information and customize their app experience to tailor it specifically for the signed-in user using their company's branding.

Conditional Access Policies

This section contains a list of all conditional Access policies configured in Azure AD.

Property	Value
C_ApplicationsExclude
C_ApplicationsInclude	Office365
C_ApplicationsIncludeUserActions
C_ClientAppTypes	exchangeActiveSync,browser,mobileAppsAndDesktopClients,other
C_Devices
C_DeviceStates
C_LocationsExclude
C_LocationsInclude
C_PlatformsExclude
C_PlatformsInclude	android,iOS
C_SignInRiskLevel
C_UsersExclude
C_UsersExcludeGroups	R_Intune_Mobile_Access
C_UsersExcludeRoles
C_UsersInclude	All
C_UsersIncludeGroups
C_UsersIncludeRoles
G_BuiltInControls	block
G_CustomControls
G_Operator	OR
G_TermsOfUse
M_Created	2022-02-17T21:12:20.8304534Z
M_DisplayName	CA - CCX - M365 - Block Unapproved Mobile Users
M_Id	3e3b4744-0993-4f0b-9b85-cc7900e4d924
M_Modified	2024-01-25T21:34:17.1586076Z
M_State	enabled
S_ApplicationEnforcedRestriction
S_CloudAppSecurity
S_CloudAppSecurityType
S_PersistentBrowser
S_PersistentBrowserMode
S_SignInFrequency
S_SignInFrequencyTimeframe

Property	Value
C_ApplicationsExclude
C_ApplicationsInclude	Office365
C_ApplicationsIncludeUserActions
C_ClientAppTypes	all
C_Devices
C_DeviceStates
C_LocationsExclude	133e40bf-ecd0-4bcd-8d4c-434fec8df72d
C_LocationsInclude	All
C_PlatformsExclude
C_PlatformsInclude	android,iOS
C_SignInRiskLevel
C_UsersExclude
C_UsersExcludeGroups	R_AAD_Offshore_Access_Mobile
C_UsersExcludeRoles
C_UsersInclude	All
C_UsersIncludeGroups
C_UsersIncludeRoles
G_BuiltInControls	block
G_CustomControls
G_Operator	OR
G_TermsOfUse
M_Created	2022-03-22T20:23:37.3397458Z
M_DisplayName	CA - CCX - Global - Restrict Mobile Access to US
M_Id	d110337f-09ee-4ec7-97d1-173a3ba97d6e
M_Modified	2023-08-29T16:05:56.0085224Z
M_State	enabled
S_ApplicationEnforcedRestriction
S_CloudAppSecurity
S_CloudAppSecurityType
S_PersistentBrowser
S_PersistentBrowserMode
S_SignInFrequency
S_SignInFrequencyTimeframe

Property	Value
C_ApplicationsExclude	VMware Horizon - Unified Access Gateway(17a58be3-afbe-45c4-a4ab-4e7640c285fc)
C_ApplicationsInclude	All
C_ApplicationsIncludeUserActions
C_ClientAppTypes	all
C_Devices
C_DeviceStates
C_LocationsExclude	AllTrusted
C_LocationsInclude	All
C_PlatformsExclude
C_PlatformsInclude	macOS
C_SignInRiskLevel
C_UsersExclude
C_UsersExcludeGroups
C_UsersExcludeRoles
C_UsersInclude	All
C_UsersIncludeGroups
C_UsersIncludeRoles
G_BuiltInControls	compliantDevice
G_CustomControls
G_Operator	OR
G_TermsOfUse
M_Created	2022-03-31T13:54:15.2358463Z
M_DisplayName	CA - CCX - M365 - Grant Compliance Access- MacOS
M_Id	76f1d229-e04d-4490-8dc9-a6ba605b0f82
M_Modified	2025-05-13T12:27:21.1072702Z
M_State	enabled
S_ApplicationEnforcedRestriction
S_CloudAppSecurity
S_CloudAppSecurityType
S_PersistentBrowser
S_PersistentBrowserMode
S_SignInFrequency	True
S_SignInFrequencyTimeframe	7 days

Property	Value
C_ApplicationsExclude	VMware Horizon - Unified Access Gateway(17a58be3-afbe-45c4-a4ab-4e7640c285fc)
C_ApplicationsInclude	All
C_ApplicationsIncludeUserActions
C_ClientAppTypes	all
C_Devices
C_DeviceStates
C_LocationsExclude	0e8b6659-0af2-4ead-bf4d-fc7a69efe298
C_LocationsInclude	All
C_PlatformsExclude
C_PlatformsInclude	linux
C_SignInRiskLevel
C_UsersExclude
C_UsersExcludeGroups
C_UsersExcludeRoles
C_UsersInclude	All
C_UsersIncludeGroups
C_UsersIncludeRoles
G_BuiltInControls	block
G_CustomControls
G_Operator	OR
G_TermsOfUse
M_Created	2022-08-09T15:32:33.3564342Z
M_DisplayName	CA - CCX - Global - Block Linux External Access
M_Id	a0463337-0645-4708-b0e5-98e5966e1f55
M_Modified	2025-01-03T13:36:42.5390569Z
M_State	enabled
S_ApplicationEnforcedRestriction
S_CloudAppSecurity
S_CloudAppSecurityType
S_PersistentBrowser
S_PersistentBrowserMode
S_SignInFrequency
S_SignInFrequencyTimeframe

Property	Value
C_ApplicationsExclude
C_ApplicationsInclude	Adobe Identity Management (OIDC)(6aba272b-e383-44cd-8eda-34c66dfd9546) Adobe Workfront(a846bde4-f407-45ea-ad51-c0fc77a0bb16) MicrosoftAdminPortals Windows Azure Service Management API(797f4846-ba00-4fd7-ba43-dac1f8f63013) Office365
C_ApplicationsIncludeUserActions
C_ClientAppTypes	all
C_Devices	@{includeDeviceStates=System.Object[]; excludeDeviceStates=System.Object[]; includeDevices=System.Object[]; excludeDevices=System.Object[]; deviceFilter=}
C_DeviceStates
C_LocationsExclude	0e8b6659-0af2-4ead-bf4d-fc7a69efe298
C_LocationsInclude	All
C_PlatformsExclude
C_PlatformsInclude	windows
C_SignInRiskLevel
C_UsersExclude	iCIMS Candidate Tracking Service Account(iCIMSCandidate.TrackingServiceAccount@carecentrix.com)
C_UsersExcludeGroups	AAD_MEM_Autopilot_Troubleshooting
C_UsersExcludeRoles
C_UsersInclude	All
C_UsersIncludeGroups
C_UsersIncludeRoles
G_BuiltInControls	domainJoinedDevice
G_CustomControls
G_Operator	OR
G_TermsOfUse
M_Created	2022-08-15T12:15:36.5634255Z
M_DisplayName	CA - CCX - M365 - Grant Hybrid Join Access - Windows
M_Id	59e77730-c800-4952-8708-f34b80a3267d
M_Modified	2025-05-12T18:32:36.5341764Z
M_State	enabled
S_ApplicationEnforcedRestriction
S_CloudAppSecurity
S_CloudAppSecurityType
S_PersistentBrowser
S_PersistentBrowserMode
S_SignInFrequency	True
S_SignInFrequencyTimeframe	10 days

Property	Value
C_ApplicationsExclude
C_ApplicationsInclude	Palo Alto Networks - GlobalProtect(96c5df68-2489-4cd6-9f01-a25a1ebd5071)
C_ApplicationsIncludeUserActions
C_ClientAppTypes	all
C_Devices
C_DeviceStates
C_LocationsExclude
C_LocationsInclude
C_PlatformsExclude
C_PlatformsInclude
C_SignInRiskLevel
C_UsersExclude
C_UsersExcludeGroups
C_UsersExcludeRoles
C_UsersInclude	All
C_UsersIncludeGroups
C_UsersIncludeRoles
G_BuiltInControls	mfa
G_CustomControls
G_Operator	OR
G_TermsOfUse
M_Created	2022-09-02T13:29:38.5885644Z
M_DisplayName	CA - CCX - PAGlobalProtect - Require MFA
M_Id	64f6402e-fc9d-4fcb-bffc-8a7fe2b433c9
M_Modified	2023-03-21T20:08:34.4480472Z
M_State	enabled
S_ApplicationEnforcedRestriction
S_CloudAppSecurity
S_CloudAppSecurityType
S_PersistentBrowser
S_PersistentBrowserMode
S_SignInFrequency	True
S_SignInFrequencyTimeframe	4 hours

Property	Value
C_ApplicationsExclude
C_ApplicationsInclude	Microsoft Intune Enrollment(d4ebce55-015a-49b5-a083-c84d1797ae8c)
C_ApplicationsIncludeUserActions
C_ClientAppTypes	all
C_Devices	@{includeDeviceStates=System.Object[]; excludeDeviceStates=System.Object[]; includeDevices=System.Object[]; excludeDevices=System.Object[]; deviceFilter=}
C_DeviceStates
C_LocationsExclude	0e8b6659-0af2-4ead-bf4d-fc7a69efe298
C_LocationsInclude	All
C_PlatformsExclude	android,iOS,macOS
C_PlatformsInclude	windows
C_SignInRiskLevel
C_UsersExclude
C_UsersExcludeGroups
C_UsersExcludeRoles
C_UsersInclude	All
C_UsersIncludeGroups
C_UsersIncludeRoles
G_BuiltInControls	mfa,compliantDevice
G_CustomControls
G_Operator	OR
G_TermsOfUse
M_Created	2022-09-21T19:10:46.3478047Z
M_DisplayName	CA - CCX - Intune Enrollment - Enforce MFA
M_Id	7d52c0ab-d842-47c5-b4ca-a1597e64eb9f
M_Modified	2024-05-22T18:52:16.9516782Z
M_State	enabled
S_ApplicationEnforcedRestriction
S_CloudAppSecurity
S_CloudAppSecurityType
S_PersistentBrowser
S_PersistentBrowserMode
S_SignInFrequency	True
S_SignInFrequencyTimeframe	5 days

Property	Value
C_ApplicationsExclude
C_ApplicationsInclude	Office365
C_ApplicationsIncludeUserActions
C_ClientAppTypes	all
C_Devices	@{includeDeviceStates=System.Object[]; excludeDeviceStates=System.Object[]; includeDevices=System.Object[]; excludeDevices=System.Object[]; deviceFilter=}
C_DeviceStates
C_LocationsExclude	0e8b6659-0af2-4ead-bf4d-fc7a69efe298
C_LocationsInclude	All
C_PlatformsExclude
C_PlatformsInclude	windows
C_SignInRiskLevel
C_UsersExclude
C_UsersExcludeGroups
C_UsersExcludeRoles
C_UsersInclude	All
C_UsersIncludeGroups
C_UsersIncludeRoles
G_BuiltInControls	compliantDevice
G_CustomControls
G_Operator	OR
G_TermsOfUse
M_Created	2022-09-22T16:04:32.3335064Z
M_DisplayName	CA - CCX - M365 - Grant Compliance Access - AutoPilot
M_Id	c7dc70c0-e9f8-4e15-9781-a77af3800385
M_Modified	2023-01-20T19:55:54.1432067Z
M_State	enabled
S_ApplicationEnforcedRestriction
S_CloudAppSecurity
S_CloudAppSecurityType
S_PersistentBrowser
S_PersistentBrowserMode
S_SignInFrequency	True
S_SignInFrequencyTimeframe	10 days

Property	Value
C_ApplicationsExclude
C_ApplicationsInclude	Office365
C_ApplicationsIncludeUserActions
C_ClientAppTypes	exchangeActiveSync
C_Devices
C_DeviceStates
C_LocationsExclude
C_LocationsInclude
C_PlatformsExclude	android,windows,windowsPhone,macOS,linux
C_PlatformsInclude	iOS
C_SignInRiskLevel
C_UsersExclude
C_UsersExcludeGroups
C_UsersExcludeRoles
C_UsersInclude
C_UsersIncludeGroups	AAD_MEM_iOS_Calendar_Sync
C_UsersIncludeRoles
G_BuiltInControls	mfa,compliantDevice
G_CustomControls
G_Operator	AND
G_TermsOfUse
M_Created	2022-10-12T20:28:29.7053954Z
M_DisplayName	ZZZ - CA - CCX - M365 - Grant O365 Calendar Access - iOS
M_Id	00307607-8bb1-4eb9-96c6-95ecab7ad932
M_Modified	2024-06-14T13:52:07.4310621Z
M_State	disabled
S_ApplicationEnforcedRestriction
S_CloudAppSecurity
S_CloudAppSecurityType
S_PersistentBrowser
S_PersistentBrowserMode
S_SignInFrequency
S_SignInFrequencyTimeframe

Property	Value
C_ApplicationsExclude
C_ApplicationsInclude	Workday (Prod)(4b61b374-6382-428c-8ef4-ec028803b626) Adobe Workfront(a846bde4-f407-45ea-ad51-c0fc77a0bb16) Adobe Identity Management (OIDC)(6aba272b-e383-44cd-8eda-34c66dfd9546) Graph API(ba7a4277-b289-4a26-991b-f5dfc94aada3) MicrosoftAdminPortals Workday (CCX2)(bea684e8-d221-4334-be55-df87934e91a8) Workday (CCX1)(60377700-b284-4127-8cd7-c1a8eaba2012)
C_ApplicationsIncludeUserActions
C_ClientAppTypes	browser,mobileAppsAndDesktopClients
C_Devices
C_DeviceStates
C_LocationsExclude
C_LocationsInclude
C_PlatformsExclude
C_PlatformsInclude	android,iOS
C_SignInRiskLevel
C_UsersExclude	Amason, Andrew(Andrew.Amason@carecentrix.com)
C_UsersExcludeGroups
C_UsersExcludeRoles
C_UsersInclude
C_UsersIncludeGroups	R_Intune_Mobile_Access
C_UsersIncludeRoles
G_BuiltInControls	compliantDevice
G_CustomControls
G_Operator	OR
G_TermsOfUse
M_Created	2022-10-26T12:30:44.5653473Z
M_DisplayName	CA - CCX - MEM - Grant Compliance Access - Mobile
M_Id	dbc6f77d-9990-4625-b347-214a0327ff6f
M_Modified	2025-05-19T13:45:58.961663Z
M_State	enabled
S_ApplicationEnforcedRestriction
S_CloudAppSecurity
S_CloudAppSecurityType
S_PersistentBrowser
S_PersistentBrowserMode
S_SignInFrequency
S_SignInFrequencyTimeframe

Property	Value
C_ApplicationsExclude
C_ApplicationsInclude	Graph API(ba7a4277-b289-4a26-991b-f5dfc94aada3) Microsoft Intune(0000000a-0000-0000-c000-000000000000) Microsoft Intune Enrollment(d4ebce55-015a-49b5-a083-c84d1797ae8c)
C_ApplicationsIncludeUserActions
C_ClientAppTypes	all
C_Devices
C_DeviceStates
C_LocationsExclude
C_LocationsInclude
C_PlatformsExclude
C_PlatformsInclude
C_SignInRiskLevel
C_UsersExclude
C_UsersExcludeGroups
C_UsersExcludeRoles
C_UsersInclude
C_UsersIncludeGroups	AAD_MEM_Autopilot_Troubleshooting
C_UsersIncludeRoles
G_BuiltInControls	mfa
G_CustomControls
G_Operator	OR
G_TermsOfUse
M_Created	2022-10-27T21:33:11.7093232Z
M_DisplayName	CA - CCX - MEM - Autopilot Troubleshooting
M_Id	285eaffe-3a88-4ad6-810b-3adcf01703c2
M_Modified	2025-02-21T13:37:55.172635Z
M_State	enabled
S_ApplicationEnforcedRestriction
S_CloudAppSecurity
S_CloudAppSecurityType
S_PersistentBrowser
S_PersistentBrowserMode
S_SignInFrequency	True
S_SignInFrequencyTimeframe	1 hours

Property	Value
C_ApplicationsExclude
C_ApplicationsInclude	CCX-CyberArk SAML Authentication PVWA 2025(bc15cc8a-6189-4de4-9580-fb7a1b59a186) CCX-CyberArk SAML Authentication(d9e999f7-f8d9-484b-9717-2fe1c0949ad5)
C_ApplicationsIncludeUserActions
C_ClientAppTypes	all
C_Devices
C_DeviceStates
C_LocationsExclude
C_LocationsInclude
C_PlatformsExclude
C_PlatformsInclude
C_SignInRiskLevel
C_UsersExclude
C_UsersExcludeGroups
C_UsersExcludeRoles
C_UsersInclude	All
C_UsersIncludeGroups
C_UsersIncludeRoles
G_BuiltInControls	mfa
G_CustomControls
G_Operator	OR
G_TermsOfUse
M_Created	2022-11-18T19:27:03.7597384Z
M_DisplayName	CA - CCX - CyberArk - Require MFA
M_Id	4bdb9a13-7aaa-4bf4-95b3-fdd5adde1215
M_Modified	2025-05-09T20:27:54.8528808Z
M_State	enabled
S_ApplicationEnforcedRestriction
S_CloudAppSecurity
S_CloudAppSecurityType
S_PersistentBrowser
S_PersistentBrowserMode
S_SignInFrequency	True
S_SignInFrequencyTimeframe	1 hours

Property	Value
C_ApplicationsExclude
C_ApplicationsInclude	Salesforce - HomeBridge Org1 (Prod)(a3c7328f-ae5e-484f-b430-4c3c0136d991) Salesforce Hombridge1 (pjdev Sandbox)(45e5f412-c3ba-4203-8eed-4d9a087604e9) Salesforce Hombridge1 (Backup1 Sandbox)(4f9900f4-fd9f-45dd-a0a6-91ee304d987a) Salesforce Sales (MFA Sandbox)(3ace8261-b1cf-4c6a-b61f-325981299fca) (35c4adb6-2eb7-4e65-a989-50dddb870850) Salesforce Hombridge1 (MFA Sandbox)(0489475e-c795-4943-9253-b688eb4cea33)
C_ApplicationsIncludeUserActions
C_ClientAppTypes	all
C_Devices
C_DeviceStates
C_LocationsExclude
C_LocationsInclude
C_PlatformsExclude
C_PlatformsInclude
C_SignInRiskLevel
C_UsersExclude
C_UsersExcludeGroups
C_UsersExcludeRoles
C_UsersInclude	All
C_UsersIncludeGroups
C_UsersIncludeRoles
G_BuiltInControls	mfa
G_CustomControls
G_Operator	OR
G_TermsOfUse
M_Created	2023-02-09T15:30:50.8612667Z
M_DisplayName	CA - CCX - Salesforce - Require MFA
M_Id	8ac99af1-b5de-4434-ad1e-fb5439937a91
M_Modified	2023-04-21T01:14:42.0273544Z
M_State	enabled
S_ApplicationEnforcedRestriction
S_CloudAppSecurity
S_CloudAppSecurityType
S_PersistentBrowser
S_PersistentBrowserMode
S_SignInFrequency
S_SignInFrequencyTimeframe

Property	Value
C_ApplicationsExclude
C_ApplicationsInclude	Apple Business Manager(fc67d51f-bf39-4530-8155-3714f897281b) Apple Internet Accounts(f8d98a96-0999-43f5-8af3-69971c7bb423)
C_ApplicationsIncludeUserActions
C_ClientAppTypes	all
C_Devices
C_DeviceStates
C_LocationsExclude
C_LocationsInclude
C_PlatformsExclude
C_PlatformsInclude	android,iOS
C_SignInRiskLevel
C_UsersExclude
C_UsersExcludeGroups
C_UsersExcludeRoles
C_UsersInclude
C_UsersIncludeGroups	R_Intune_Mobile_Access
C_UsersIncludeRoles
G_BuiltInControls	mfa
G_CustomControls
G_Operator	OR
G_TermsOfUse
M_Created	2023-05-18T13:30:48.7571343Z
M_DisplayName	CA - CCX - M365 - Grant ABM Access
M_Id	8ed226b3-fbb5-4a9f-9e39-c8d4e32aa7a9
M_Modified
M_State	enabled
S_ApplicationEnforcedRestriction
S_CloudAppSecurity
S_CloudAppSecurityType
S_PersistentBrowser
S_PersistentBrowserMode
S_SignInFrequency
S_SignInFrequencyTimeframe

Property	Value
C_ApplicationsExclude
C_ApplicationsInclude	All
C_ApplicationsIncludeUserActions
C_ClientAppTypes	all
C_Devices
C_DeviceStates
C_LocationsExclude
C_LocationsInclude
C_PlatformsExclude	android,iOS,windows,windowsPhone,macOS,linux
C_PlatformsInclude	all
C_SignInRiskLevel
C_UsersExclude	Boatright, Kevin(Kevin.Boatright@carecentrix.com)
C_UsersExcludeGroups
C_UsersExcludeRoles
C_UsersInclude	All
C_UsersIncludeGroups
C_UsersIncludeRoles
G_BuiltInControls	block
G_CustomControls
G_Operator	OR
G_TermsOfUse
M_Created	2023-06-27T19:19:49.4479974Z
M_DisplayName	CA - CCX - Global - Block access for unknown or unsupported device platform
M_Id	078daecb-3500-4641-9a2d-0f4486ffac05
M_Modified	2024-05-22T17:24:39.0407319Z
M_State	enabled
S_ApplicationEnforcedRestriction
S_CloudAppSecurity
S_CloudAppSecurityType
S_PersistentBrowser
S_PersistentBrowserMode
S_SignInFrequency
S_SignInFrequencyTimeframe

Property	Value
C_ApplicationsExclude
C_ApplicationsInclude	All
C_ApplicationsIncludeUserActions
C_ClientAppTypes	exchangeActiveSync,other
C_Devices
C_DeviceStates
C_LocationsExclude
C_LocationsInclude
C_PlatformsExclude
C_PlatformsInclude
C_SignInRiskLevel
C_UsersExclude	Amason, Andrew(Andrew.Amason@carecentrix.com)
C_UsersExcludeGroups
C_UsersExcludeRoles
C_UsersInclude	All
C_UsersIncludeGroups
C_UsersIncludeRoles
G_BuiltInControls	block
G_CustomControls
G_Operator	OR
G_TermsOfUse
M_Created	2023-07-05T18:46:02.5563718Z
M_DisplayName	CA - CCX - Global - Block legacy authentication
M_Id	68063282-76fe-475d-9177-cf17f411f4f4
M_Modified	2024-06-23T00:02:11.9459079Z
M_State	enabled
S_ApplicationEnforcedRestriction
S_CloudAppSecurity
S_CloudAppSecurityType
S_PersistentBrowser
S_PersistentBrowserMode
S_SignInFrequency
S_SignInFrequencyTimeframe

Property	Value
C_ApplicationsExclude
C_ApplicationsInclude	Palo Alto Networks - GlobalProtect(96c5df68-2489-4cd6-9f01-a25a1ebd5071) Office365
C_ApplicationsIncludeUserActions
C_ClientAppTypes	all
C_Devices
C_DeviceStates
C_LocationsExclude
C_LocationsInclude
C_PlatformsExclude
C_PlatformsInclude	all
C_SignInRiskLevel
C_UsersExclude
C_UsersExcludeGroups	R_Allow_Bypass_TimeRestriction
C_UsersExcludeRoles
C_UsersInclude
C_UsersIncludeGroups	R_Block_All_Access R_Block_All_Access_RCM
C_UsersIncludeRoles
G_BuiltInControls	block
G_CustomControls
G_Operator	OR
G_TermsOfUse
M_Created	2023-08-03T18:02:44.4020998Z
M_DisplayName	CCX - CA - Block Hourly Users from Connection outside of logonhours
M_Id	34e6cec4-2896-45f3-9a70-240b29b9a7a9
M_Modified	2024-11-16T14:02:50.4320079Z
M_State	enabledForReportingButNotEnforced
S_ApplicationEnforcedRestriction
S_CloudAppSecurity
S_CloudAppSecurityType
S_PersistentBrowser
S_PersistentBrowserMode
S_SignInFrequency
S_SignInFrequencyTimeframe

Property	Value
C_ApplicationsExclude
C_ApplicationsInclude	All
C_ApplicationsIncludeUserActions
C_ClientAppTypes	all
C_Devices
C_DeviceStates
C_LocationsExclude	0e8b6659-0af2-4ead-bf4d-fc7a69efe298
C_LocationsInclude	All
C_PlatformsExclude
C_PlatformsInclude	windows
C_SignInRiskLevel
C_UsersExclude
C_UsersExcludeGroups
C_UsersExcludeRoles
C_UsersInclude	Nguyen, Christopher(Christopher.Nguyen@carecentrix.com) Amason, Andrew(Andrew.Amason@carecentrix.com)
C_UsersIncludeGroups
C_UsersIncludeRoles
G_BuiltInControls	compliantDevice
G_CustomControls
G_Operator	OR
G_TermsOfUse
M_Created	2023-11-09T19:51:02.4973061Z
M_DisplayName	CA - CCX - M365 - Grant Compliance Access - Windows
M_Id	fbf4a646-01d9-40a1-ac13-83571d5f72ff
M_Modified	2024-01-04T19:14:16.7230578Z
M_State	enabledForReportingButNotEnforced
S_ApplicationEnforcedRestriction
S_CloudAppSecurity
S_CloudAppSecurityType
S_PersistentBrowser
S_PersistentBrowserMode
S_SignInFrequency
S_SignInFrequencyTimeframe

Property	Value
C_ApplicationsExclude
C_ApplicationsInclude	MicrosoftAdminPortals
C_ApplicationsIncludeUserActions
C_ClientAppTypes	all
C_Devices
C_DeviceStates
C_LocationsExclude
C_LocationsInclude
C_PlatformsExclude
C_PlatformsInclude
C_SignInRiskLevel
C_UsersExclude
C_UsersExcludeGroups
C_UsersExcludeRoles
C_UsersInclude
C_UsersIncludeGroups
C_UsersIncludeRoles	Global Administrator Security Administrator SharePoint Administrator Exchange Administrator Conditional Access Administrator Helpdesk Administrator Billing Administrator User Administrator Authentication Administrator Application Administrator Cloud Application Administrator Password Administrator Privileged Authentication Administrator Privileged Role Administrator
G_BuiltInControls	mfa
G_CustomControls
G_Operator	OR
G_TermsOfUse
M_Created	2023-11-13T22:46:21.4971797Z
M_DisplayName	Microsoft-managed: Multifactor authentication for admins accessing Microsoft Admin Portals
M_Id	86b5910c-dcba-432d-8e92-761c89592fc2
M_Modified	2024-06-10T20:43:09.6885003Z
M_State	enabled
S_ApplicationEnforcedRestriction
S_CloudAppSecurity
S_CloudAppSecurityType
S_PersistentBrowser
S_PersistentBrowserMode
S_SignInFrequency
S_SignInFrequencyTimeframe

Property	Value
C_ApplicationsExclude
C_ApplicationsInclude	VMware Horizon - Unified Access Gateway(17a58be3-afbe-45c4-a4ab-4e7640c285fc)
C_ApplicationsIncludeUserActions
C_ClientAppTypes	all
C_Devices
C_DeviceStates
C_LocationsExclude
C_LocationsInclude
C_PlatformsExclude
C_PlatformsInclude
C_SignInRiskLevel
C_UsersExclude
C_UsersExcludeGroups
C_UsersExcludeRoles
C_UsersInclude	All
C_UsersIncludeGroups
C_UsersIncludeRoles
G_BuiltInControls	mfa
G_CustomControls
G_Operator	OR
G_TermsOfUse
M_Created	2024-02-09T15:51:46.3678241Z
M_DisplayName	CA - CCX - Horizon VDI - Require MFA
M_Id	c46f1758-eeb3-4fc9-8127-4f65214e051b
M_Modified
M_State	enabled
S_ApplicationEnforcedRestriction
S_CloudAppSecurity
S_CloudAppSecurityType
S_PersistentBrowser
S_PersistentBrowserMode
S_SignInFrequency
S_SignInFrequencyTimeframe

Property	Value
C_ApplicationsExclude	Adobe Workfront(a846bde4-f407-45ea-ad51-c0fc77a0bb16) Adobe Identity Management (OIDC)(6aba272b-e383-44cd-8eda-34c66dfd9546) Graph API(ba7a4277-b289-4a26-991b-f5dfc94aada3) MicrosoftAdminPortals Workday (CCX2)(bea684e8-d221-4334-be55-df87934e91a8) Workday (CCX1)(60377700-b284-4127-8cd7-c1a8eaba2012) iCares Acheivers Prod(89a8edbd-eda9-408a-86e2-b1791c34acaf) iCares Achievers Non-Prod(1278cadf-4d1f-4da4-af94-b04bfebae3a2) VMware Horizon - Unified Access Gateway(17a58be3-afbe-45c4-a4ab-4e7640c285fc)
C_ApplicationsInclude	All
C_ApplicationsIncludeUserActions
C_ClientAppTypes	browser,mobileAppsAndDesktopClients
C_Devices
C_DeviceStates
C_LocationsExclude
C_LocationsInclude
C_PlatformsExclude
C_PlatformsInclude	android,iOS
C_SignInRiskLevel
C_UsersExclude
C_UsersExcludeGroups
C_UsersExcludeRoles
C_UsersInclude
C_UsersIncludeGroups	R_Intune_Mobile_Access
C_UsersIncludeRoles
G_BuiltInControls	compliantDevice,compliantApplication
G_CustomControls
G_Operator	AND
G_TermsOfUse
M_Created	2024-05-01T17:36:58.904788Z
M_DisplayName	CA - CCX - MEM - Grant Compliance Access - App Protection - Mobile
M_Id	e50a2e91-a37f-43e0-a623-b19606cd19b8
M_Modified	2025-05-12T18:31:37.3953553Z
M_State	enabled
S_ApplicationEnforcedRestriction
S_CloudAppSecurity
S_CloudAppSecurityType
S_PersistentBrowser
S_PersistentBrowserMode
S_SignInFrequency
S_SignInFrequencyTimeframe

Property	Value
C_ApplicationsExclude	VMware Horizon - Unified Access Gateway(17a58be3-afbe-45c4-a4ab-4e7640c285fc)
C_ApplicationsInclude	All
C_ApplicationsIncludeUserActions
C_ClientAppTypes	all
C_Devices
C_DeviceStates
C_LocationsExclude	133e40bf-ecd0-4bcd-8d4c-434fec8df72d
C_LocationsInclude	All
C_PlatformsExclude
C_PlatformsInclude	windows,macOS,linux
C_SignInRiskLevel
C_UsersExclude
C_UsersExcludeGroups	R_AAD_Offshore_Access_Desktop
C_UsersExcludeRoles
C_UsersInclude	All
C_UsersIncludeGroups
C_UsersIncludeRoles
G_BuiltInControls	block
G_CustomControls
G_Operator	OR
G_TermsOfUse
M_Created	2024-05-14T16:21:34.1740646Z
M_DisplayName	CA - CCX - Global - Restrict Desktop Access to US
M_Id	4b2d07c0-3cf2-4810-847c-d2b3e533478e
M_Modified	2024-08-25T00:59:16.8055874Z
M_State	enabled
S_ApplicationEnforcedRestriction
S_CloudAppSecurity
S_CloudAppSecurityType
S_PersistentBrowser
S_PersistentBrowserMode
S_SignInFrequency
S_SignInFrequencyTimeframe

Property	Value
C_ApplicationsExclude
C_ApplicationsInclude	(2fa253eb-05fe-4877-9bdb-3c085f9288ac)
C_ApplicationsIncludeUserActions
C_ClientAppTypes	all
C_Devices
C_DeviceStates
C_LocationsExclude
C_LocationsInclude
C_PlatformsExclude
C_PlatformsInclude
C_SignInRiskLevel
C_UsersExclude
C_UsersExcludeGroups
C_UsersExcludeRoles
C_UsersInclude	All
C_UsersIncludeGroups
C_UsersIncludeRoles
G_BuiltInControls	mfa
G_CustomControls
G_Operator	OR
G_TermsOfUse
M_Created	2024-06-17T18:52:54.4123008Z
M_DisplayName	CA - CCX - Provider Portal - MFA POC - Require MFA
M_Id	a20b3ea9-8f59-4d57-bfd5-1589c345da65
M_Modified	2024-06-21T21:09:19.9669461Z
M_State	enabled
S_ApplicationEnforcedRestriction
S_CloudAppSecurity
S_CloudAppSecurityType
S_PersistentBrowser
S_PersistentBrowserMode
S_SignInFrequency
S_SignInFrequencyTimeframe

Property	Value
C_ApplicationsExclude
C_ApplicationsInclude	NICE CXone - Troubleshooting(b4cc398a-99da-4eb5-a688-525a4b35a65d) NICE EEM(402a8daa-dc65-4c18-9842-beef25f7e084) NICE NDE(dc8bfd1a-51fb-42d5-9398-b4fe7791590b) Nice WFM(d0be22d3-0d40-431b-87a6-f26654b44694) NICE CXone(15cde0a7-7611-4432-8a8c-dd7d6eded99a)
C_ApplicationsIncludeUserActions
C_ClientAppTypes	all
C_Devices
C_DeviceStates
C_LocationsExclude
C_LocationsInclude
C_PlatformsExclude
C_PlatformsInclude
C_SignInRiskLevel
C_UsersExclude
C_UsersExcludeGroups
C_UsersExcludeRoles
C_UsersInclude	All
C_UsersIncludeGroups
C_UsersIncludeRoles
G_BuiltInControls	mfa
G_CustomControls
G_Operator	OR
G_TermsOfUse
M_Created	2024-08-01T16:41:41.0357993Z
M_DisplayName	CA - CCX - Nice - Require MFA
M_Id	f1849c07-5c67-458e-84ec-59514427ded1
M_Modified	2024-11-25T15:31:22.6475098Z
M_State	enabled
S_ApplicationEnforcedRestriction
S_CloudAppSecurity
S_CloudAppSecurityType
S_PersistentBrowser
S_PersistentBrowserMode
S_SignInFrequency
S_SignInFrequencyTimeframe

Property	Value
C_ApplicationsExclude
C_ApplicationsInclude	AWS IAM Identity Center (CCX)(280da9ad-192a-4b64-a323-d9a7bf129d38)
C_ApplicationsIncludeUserActions
C_ClientAppTypes	all
C_Devices
C_DeviceStates
C_LocationsExclude
C_LocationsInclude
C_PlatformsExclude
C_PlatformsInclude
C_SignInRiskLevel
C_UsersExclude
C_UsersExcludeGroups
C_UsersExcludeRoles
C_UsersInclude	All
C_UsersIncludeGroups
C_UsersIncludeRoles
G_BuiltInControls	mfa
G_CustomControls
G_Operator	OR
G_TermsOfUse
M_Created	2024-08-02T00:47:57.4759172Z
M_DisplayName	CA - CCX - AWS - Require MFA
M_Id	55a52b38-c772-4abf-aeca-79080fe165b3
M_Modified	2024-08-02T00:59:29.7448389Z
M_State	enabled
S_ApplicationEnforcedRestriction
S_CloudAppSecurity
S_CloudAppSecurityType
S_PersistentBrowser
S_PersistentBrowserMode
S_SignInFrequency	True
S_SignInFrequencyTimeframe	2 hours

Property	Value
C_ApplicationsExclude
C_ApplicationsInclude	AWS IAM Identity Center (CCX)(280da9ad-192a-4b64-a323-d9a7bf129d38)
C_ApplicationsIncludeUserActions
C_ClientAppTypes	all
C_Devices
C_DeviceStates
C_LocationsExclude	0e8b6659-0af2-4ead-bf4d-fc7a69efe298
C_LocationsInclude	All
C_PlatformsExclude
C_PlatformsInclude
C_SignInRiskLevel
C_UsersExclude
C_UsersExcludeGroups
C_UsersExcludeRoles
C_UsersInclude	All
C_UsersIncludeGroups
C_UsersIncludeRoles
G_BuiltInControls	compliantDevice,domainJoinedDevice
G_CustomControls
G_Operator	OR
G_TermsOfUse
M_Created	2024-08-02T01:02:34.44919Z
M_DisplayName	CA - CCX - AWS - Require CCX Network/Devices
M_Id	32e0efd9-8e39-4347-8ebb-e182954a08c6
M_Modified	2024-08-02T01:04:01.2516409Z
M_State	enabled
S_ApplicationEnforcedRestriction
S_CloudAppSecurity
S_CloudAppSecurityType
S_PersistentBrowser
S_PersistentBrowserMode
S_SignInFrequency
S_SignInFrequencyTimeframe

Property	Value
C_ApplicationsExclude
C_ApplicationsInclude	NICE CXone - Troubleshooting(b4cc398a-99da-4eb5-a688-525a4b35a65d) NICE NDE(dc8bfd1a-51fb-42d5-9398-b4fe7791590b) NICE CXone(15cde0a7-7611-4432-8a8c-dd7d6eded99a)
C_ApplicationsIncludeUserActions
C_ClientAppTypes	all
C_Devices
C_DeviceStates
C_LocationsExclude	0e8b6659-0af2-4ead-bf4d-fc7a69efe298
C_LocationsInclude	All
C_PlatformsExclude
C_PlatformsInclude
C_SignInRiskLevel
C_UsersExclude
C_UsersExcludeGroups
C_UsersExcludeRoles
C_UsersInclude	All
C_UsersIncludeGroups
C_UsersIncludeRoles
G_BuiltInControls	compliantDevice,domainJoinedDevice
G_CustomControls
G_Operator	OR
G_TermsOfUse
M_Created	2024-08-07T15:15:35.7189561Z
M_DisplayName	CA - CCX - NICE - Require CCX Network/Devices
M_Id	627ebbbf-90c6-4ddf-a8c3-84aac1a1de22
M_Modified	2024-11-25T15:31:59.5147857Z
M_State	enabled
S_ApplicationEnforcedRestriction
S_CloudAppSecurity
S_CloudAppSecurityType
S_PersistentBrowser
S_PersistentBrowserMode
S_SignInFrequency
S_SignInFrequencyTimeframe

Property	Value
C_ApplicationsExclude
C_ApplicationsInclude	Provider Portal - MFA POC(020b856f-ddcb-4e88-8973-e413d00f96d3)
C_ApplicationsIncludeUserActions
C_ClientAppTypes	all
C_Devices
C_DeviceStates
C_LocationsExclude
C_LocationsInclude
C_PlatformsExclude
C_PlatformsInclude
C_SignInRiskLevel
C_UsersExclude
C_UsersExcludeGroups
C_UsersExcludeRoles
C_UsersInclude	All
C_UsersIncludeGroups
C_UsersIncludeRoles
G_BuiltInControls	mfa
G_CustomControls
G_Operator	OR
G_TermsOfUse
M_Created	2024-08-15T16:30:18.9291167Z
M_DisplayName	CA - CCX - Provider Portal POC - Require MFA
M_Id	7a87172e-5624-4e93-be26-05bb4aa6601f
M_Modified
M_State	enabled
S_ApplicationEnforcedRestriction
S_CloudAppSecurity
S_CloudAppSecurityType
S_PersistentBrowser
S_PersistentBrowserMode
S_SignInFrequency
S_SignInFrequencyTimeframe

Property	Value
C_ApplicationsExclude
C_ApplicationsInclude	Bitwarden SSO(1d934c2c-7c12-4e4a-8616-3dc5eb09c555)
C_ApplicationsIncludeUserActions
C_ClientAppTypes	all
C_Devices
C_DeviceStates
C_LocationsExclude	0e8b6659-0af2-4ead-bf4d-fc7a69efe298
C_LocationsInclude	All
C_PlatformsExclude
C_PlatformsInclude
C_SignInRiskLevel
C_UsersExclude
C_UsersExcludeGroups
C_UsersExcludeRoles
C_UsersInclude
C_UsersIncludeGroups	R_Bitwarden_Login_SSO
C_UsersIncludeRoles
G_BuiltInControls	mfa,compliantDevice
G_CustomControls
G_Operator	AND
G_TermsOfUse
M_Created	2024-09-05T14:44:16.5552184Z
M_DisplayName	CA - CCX - Bitwarden - Require MFA and CCX Device
M_Id	60fa8cf3-5317-4694-ace3-2f6e9d8b0764
M_Modified	2024-11-12T19:19:04.479096Z
M_State	enabled
S_ApplicationEnforcedRestriction
S_CloudAppSecurity
S_CloudAppSecurityType
S_PersistentBrowser
S_PersistentBrowserMode
S_SignInFrequency	True
S_SignInFrequencyTimeframe	1 hours

Property	Value
C_ApplicationsExclude
C_ApplicationsInclude	Proofpoint on Demand(dbbf6b93-d68e-4f8d-9dab-a028b0e49a57)
C_ApplicationsIncludeUserActions
C_ClientAppTypes	all
C_Devices
C_DeviceStates
C_LocationsExclude
C_LocationsInclude
C_PlatformsExclude
C_PlatformsInclude
C_SignInRiskLevel
C_UsersExclude
C_UsersExcludeGroups
C_UsersExcludeRoles
C_UsersInclude	All
C_UsersIncludeGroups
C_UsersIncludeRoles
G_BuiltInControls	mfa
G_CustomControls
G_Operator	OR
G_TermsOfUse
M_Created	2024-09-24T15:44:39.2994353Z
M_DisplayName	CA - CCX - Proofpoint on Demand - Require MFA
M_Id	86a2cac6-466d-4cfe-aa61-a3a4f73456d9
M_Modified
M_State	enabled
S_ApplicationEnforcedRestriction
S_CloudAppSecurity
S_CloudAppSecurityType
S_PersistentBrowser
S_PersistentBrowserMode
S_SignInFrequency
S_SignInFrequencyTimeframe

Property	Value
C_ApplicationsExclude
C_ApplicationsInclude	Proofpoint Admin Portal (POD)(5144935d-66fb-4662-ae74-0e62d4c44d7d)
C_ApplicationsIncludeUserActions
C_ClientAppTypes	all
C_Devices
C_DeviceStates
C_LocationsExclude
C_LocationsInclude
C_PlatformsExclude
C_PlatformsInclude
C_SignInRiskLevel
C_UsersExclude
C_UsersExcludeGroups
C_UsersExcludeRoles
C_UsersInclude	All
C_UsersIncludeGroups
C_UsersIncludeRoles
G_BuiltInControls	mfa
G_CustomControls
G_Operator	OR
G_TermsOfUse
M_Created	2024-09-24T15:58:30.6132496Z
M_DisplayName	CA - CCX - Proofpoint Admin Portal - Require MFA
M_Id	3322aa63-33d1-446a-9e16-31139a3fe54e
M_Modified	2024-09-25T14:53:55.5931791Z
M_State	enabled
S_ApplicationEnforcedRestriction
S_CloudAppSecurity
S_CloudAppSecurityType
S_PersistentBrowser
S_PersistentBrowserMode
S_SignInFrequency
S_SignInFrequencyTimeframe

Property	Value
C_ApplicationsExclude
C_ApplicationsInclude	NICE EEM(402a8daa-dc65-4c18-9842-beef25f7e084) Nice WFM(d0be22d3-0d40-431b-87a6-f26654b44694)
C_ApplicationsIncludeUserActions
C_ClientAppTypes	all
C_Devices
C_DeviceStates
C_LocationsExclude	0e8b6659-0af2-4ead-bf4d-fc7a69efe298
C_LocationsInclude	All
C_PlatformsExclude	android,iOS,macOS,linux
C_PlatformsInclude	all
C_SignInRiskLevel
C_UsersExclude
C_UsersExcludeGroups
C_UsersExcludeRoles
C_UsersInclude	All
C_UsersIncludeGroups
C_UsersIncludeRoles
G_BuiltInControls	compliantDevice,domainJoinedDevice
G_CustomControls
G_Operator	OR
G_TermsOfUse
M_Created	2024-10-31T20:39:16.4989029Z
M_DisplayName	CA - CCX - NICE - Require CCX Network/Devices - WFM Reporting
M_Id	74f14456-2a20-4691-a1d0-32066032f3f8
M_Modified	2024-11-01T20:05:33.5959864Z
M_State	enabledForReportingButNotEnforced
S_ApplicationEnforcedRestriction
S_CloudAppSecurity
S_CloudAppSecurityType
S_PersistentBrowser
S_PersistentBrowserMode
S_SignInFrequency
S_SignInFrequencyTimeframe

Property	Value
C_ApplicationsExclude
C_ApplicationsInclude	All
C_ApplicationsIncludeUserActions
C_ClientAppTypes	all
C_Devices
C_DeviceStates
C_LocationsExclude
C_LocationsInclude
C_PlatformsExclude
C_PlatformsInclude
C_SignInRiskLevel
C_UsersExclude
C_UsersExcludeGroups
C_UsersExcludeRoles
C_UsersInclude	None
C_UsersIncludeGroups
C_UsersIncludeRoles
G_BuiltInControls
G_CustomControls
G_Operator
G_TermsOfUse
M_Created	2024-11-08T18:43:48.2142577Z
M_DisplayName	Block TOR & Anonymous Proxies
M_Id	19f10781-9820-4cb0-856e-13a634578895
M_Modified	2024-12-02T14:27:27.2306555Z
M_State	disabled
S_ApplicationEnforcedRestriction
S_CloudAppSecurity	True
S_CloudAppSecurityType
S_PersistentBrowser
S_PersistentBrowserMode
S_SignInFrequency
S_SignInFrequencyTimeframe

Property	Value
C_ApplicationsExclude
C_ApplicationsInclude	Bitwarden SSO(1d934c2c-7c12-4e4a-8616-3dc5eb09c555)
C_ApplicationsIncludeUserActions
C_ClientAppTypes	all
C_Devices
C_DeviceStates
C_LocationsExclude
C_LocationsInclude	0e8b6659-0af2-4ead-bf4d-fc7a69efe298
C_PlatformsExclude
C_PlatformsInclude
C_SignInRiskLevel
C_UsersExclude
C_UsersExcludeGroups
C_UsersExcludeRoles
C_UsersInclude
C_UsersIncludeGroups	R_Bitwarden_Login_SSO
C_UsersIncludeRoles
G_BuiltInControls	mfa
G_CustomControls
G_Operator	OR
G_TermsOfUse
M_Created	2024-11-12T19:17:11.9020732Z
M_DisplayName	CA - CCX - Bitwarden - Require MFA and CCX IP
M_Id	ef4467fa-d9a9-4f3f-b245-cedb5f33fa7a
M_Modified	2024-11-13T15:20:45.047139Z
M_State	enabled
S_ApplicationEnforcedRestriction
S_CloudAppSecurity
S_CloudAppSecurityType
S_PersistentBrowser
S_PersistentBrowserMode
S_SignInFrequency	True
S_SignInFrequencyTimeframe	1 hours

Property	Value
C_ApplicationsExclude
C_ApplicationsInclude	MicrosoftAdminPortals
C_ApplicationsIncludeUserActions
C_ClientAppTypes	all
C_Devices
C_DeviceStates
C_LocationsExclude
C_LocationsInclude
C_PlatformsExclude
C_PlatformsInclude
C_SignInRiskLevel
C_UsersExclude	Amason, Andrew(Andrew.Amason@carecentrix.com)
C_UsersExcludeGroups
C_UsersExcludeRoles
C_UsersInclude
C_UsersIncludeGroups
C_UsersIncludeRoles	Exchange Administrator Global Reader Intune Administrator
G_BuiltInControls	mfa
G_CustomControls
G_Operator	OR
G_TermsOfUse
M_Created	2024-11-14T20:27:14.6239241Z
M_DisplayName	Supplimental: Multifactor authentication for admins accessing Microsoft Admin Portals COPY
M_Id	45fab5d2-a2af-4ec3-ae65-4f58686b14d1
M_Modified	2025-02-24T15:01:01.3827304Z
M_State	enabled
S_ApplicationEnforcedRestriction
S_CloudAppSecurity
S_CloudAppSecurityType
S_PersistentBrowser
S_PersistentBrowserMode
S_SignInFrequency	True
S_SignInFrequencyTimeframe	2 hours

Property	Value
C_ApplicationsExclude
C_ApplicationsInclude	RemoteAssistanceService(1dee7b72-b80d-4e56-933d-8b6b04f9a3e2)
C_ApplicationsIncludeUserActions
C_ClientAppTypes	all
C_Devices
C_DeviceStates
C_LocationsExclude
C_LocationsInclude
C_PlatformsExclude
C_PlatformsInclude
C_SignInRiskLevel
C_UsersExclude
C_UsersExcludeGroups
C_UsersExcludeRoles
C_UsersInclude
C_UsersIncludeGroups	AAD_Microsoft365_Licensing_RemoteHelp
C_UsersIncludeRoles
G_BuiltInControls	mfa
G_CustomControls
G_Operator	OR
G_TermsOfUse
M_Created	2025-01-24T21:49:55.029118Z
M_DisplayName	CA - CCX - MEM - Remote Help
M_Id	5491b1de-b07d-4ad0-b35b-cd8d2041f2d2
M_Modified	2025-01-30T18:11:52.0065847Z
M_State	enabled
S_ApplicationEnforcedRestriction
S_CloudAppSecurity
S_CloudAppSecurityType
S_PersistentBrowser
S_PersistentBrowserMode
S_SignInFrequency
S_SignInFrequencyTimeframe

Property	Value
C_ApplicationsExclude
C_ApplicationsInclude	All
C_ApplicationsIncludeUserActions
C_ClientAppTypes	all
C_Devices
C_DeviceStates
C_LocationsExclude
C_LocationsInclude
C_PlatformsExclude
C_PlatformsInclude
C_SignInRiskLevel	high
C_UsersExclude
C_UsersExcludeGroups
C_UsersExcludeRoles
C_UsersInclude
C_UsersIncludeGroups	Conditional Access: Risky sign-in multifactor authentication (a4ea6c0f-b8fb-4d29-91f1-9f8cf0601e98)
C_UsersIncludeRoles
G_BuiltInControls	mfa
G_CustomControls
G_Operator	OR
G_TermsOfUse
M_Created	2025-02-13T01:38:04.1923904Z
M_DisplayName	Microsoft-managed: Multifactor authentication and reauthentication for risky sign-ins
M_Id	f501b837-3b2b-4e04-8cda-7680becf3e37
M_Modified	2025-05-14T20:02:03.06783Z
M_State	enabled
S_ApplicationEnforcedRestriction
S_CloudAppSecurity
S_CloudAppSecurityType
S_PersistentBrowser
S_PersistentBrowserMode
S_SignInFrequency	True
S_SignInFrequencyTimeframe

Property	Value
C_ApplicationsExclude
C_ApplicationsInclude	All
C_ApplicationsIncludeUserActions
C_ClientAppTypes	all
C_Devices
C_DeviceStates
C_LocationsExclude
C_LocationsInclude	00985883-fe80-46d2-aa8c-5e3aa8ebc24f
C_PlatformsExclude
C_PlatformsInclude
C_SignInRiskLevel
C_UsersExclude
C_UsersExcludeGroups
C_UsersExcludeRoles
C_UsersInclude	()
C_UsersIncludeGroups
C_UsersIncludeRoles
G_BuiltInControls	block
G_CustomControls
G_Operator	OR
G_TermsOfUse
M_Created	2025-04-02T13:03:37.3048002Z
M_DisplayName	Block VPN IP Ranges
M_Id	fdbaf0e6-f585-4984-8a5b-e3204926c6f8
M_Modified	2025-04-02T15:22:37.4138687Z
M_State	enabled
S_ApplicationEnforcedRestriction
S_CloudAppSecurity
S_CloudAppSecurityType
S_PersistentBrowser
S_PersistentBrowserMode
S_SignInFrequency
S_SignInFrequencyTimeframe

Property	Value
C_ApplicationsExclude
C_ApplicationsInclude	All
C_ApplicationsIncludeUserActions
C_ClientAppTypes	all
C_Devices
C_DeviceStates
C_LocationsExclude
C_LocationsInclude
C_PlatformsExclude
C_PlatformsInclude	windowsPhone
C_SignInRiskLevel
C_UsersExclude	Amason, Andrew(Andrew.Amason@carecentrix.com)
C_UsersExcludeGroups
C_UsersExcludeRoles
C_UsersInclude	All
C_UsersIncludeGroups
C_UsersIncludeRoles
G_BuiltInControls	block
G_CustomControls
G_Operator	OR
G_TermsOfUse
M_Created	2025-04-03T20:40:52.652171Z
M_DisplayName	CA - CCX - Global - Block Windows Phone Access
M_Id	a045b8c1-caa2-4444-8b26-d0eba0377900
M_Modified	2025-04-15T17:43:16.5472313Z
M_State	enabled
S_ApplicationEnforcedRestriction
S_CloudAppSecurity
S_CloudAppSecurityType
S_PersistentBrowser
S_PersistentBrowserMode
S_SignInFrequency
S_SignInFrequencyTimeframe

Property	Value
C_ApplicationsExclude
C_ApplicationsInclude	All
C_ApplicationsIncludeUserActions
C_ClientAppTypes	all
C_Devices
C_DeviceStates
C_LocationsExclude
C_LocationsInclude
C_PlatformsExclude
C_PlatformsInclude
C_SignInRiskLevel
C_UsersExclude
C_UsersExcludeGroups
C_UsersExcludeRoles
C_UsersInclude	All
C_UsersIncludeGroups
C_UsersIncludeRoles
G_BuiltInControls	block
G_CustomControls
G_Operator	OR
G_TermsOfUse
M_Created	2025-04-22T00:41:54.9443682Z
M_DisplayName	Microsoft-managed: Block device code flow
M_Id	b3b9b82b-165e-4b31-a1aa-adb952835e62
M_Modified	2025-04-29T15:25:01.4610866Z
M_State	enabled
S_ApplicationEnforcedRestriction
S_CloudAppSecurity
S_CloudAppSecurityType
S_PersistentBrowser
S_PersistentBrowserMode
S_SignInFrequency
S_SignInFrequencyTimeframe

Conditional Access Policies

This section contains a list of all conditional Access policies configured in Azure AD.

CA - CCX - M365 - Block Unapproved Mobile Users

Metadata

Name	Value
Created	2022-02-17T21:12:20.8304534Z
DisplayName	CA - CCX - M365 - Block Unapproved Mobile Users
Id	3e3b4744-0993-4f0b-9b85-cc7900e4d924
Modified	2024-01-25T21:34:17.1586076Z
State	enabled

Conditions

Name	Value
ApplicationsExclude
ApplicationsInclude	Office365
ApplicationsIncludeUserActions
ClientAppTypes	exchangeActiveSync,browser,mobileAppsAndDesktopClients,other
Devices
DeviceStates
LocationsExclude
LocationsInclude
PlatformsExclude
PlatformsInclude	android,iOS
SignInRiskLevel
UsersExclude
UsersExcludeGroups	R_Intune_Mobile_Access
UsersExcludeRoles
UsersInclude	All
UsersIncludeGroups
UsersIncludeRoles

Grant Controls

Name	Value
BuiltInControls	block
CustomControls
Operator	OR
TermsOfUse

Session Controls

Name	Value
ApplicationEnforcedRestriction
CloudAppSecurity
CloudAppSecurityType
PersistentBrowser
PersistentBrowserMode
SignInFrequency
SignInFrequencyTimeframe

CA - CCX - Global - Restrict Mobile Access to US

Metadata

Name	Value
Created	2022-03-22T20:23:37.3397458Z
DisplayName	CA - CCX - Global - Restrict Mobile Access to US
Id	d110337f-09ee-4ec7-97d1-173a3ba97d6e
Modified	2023-08-29T16:05:56.0085224Z
State	enabled

Conditions

Name	Value
ApplicationsExclude
ApplicationsInclude	Office365
ApplicationsIncludeUserActions
ClientAppTypes	all
Devices
DeviceStates
LocationsExclude	133e40bf-ecd0-4bcd-8d4c-434fec8df72d
LocationsInclude	All
PlatformsExclude
PlatformsInclude	android,iOS
SignInRiskLevel
UsersExclude
UsersExcludeGroups	R_Intune_Mobile_AccessR_AAD_Offshore_Access_Mobile
UsersExcludeRoles
UsersInclude	All
UsersIncludeGroups
UsersIncludeRoles

Grant Controls

Name	Value
BuiltInControls	block
CustomControls
Operator	OR
TermsOfUse

Session Controls

Name	Value
ApplicationEnforcedRestriction
CloudAppSecurity
CloudAppSecurityType
PersistentBrowser
PersistentBrowserMode
SignInFrequency
SignInFrequencyTimeframe

CA - CCX - M365 - Grant Compliance Access- MacOS

Metadata

Name	Value
Created	2022-03-31T13:54:15.2358463Z
DisplayName	CA - CCX - M365 - Grant Compliance Access- MacOS
Id	76f1d229-e04d-4490-8dc9-a6ba605b0f82
Modified	2025-05-13T12:27:21.1072702Z
State	enabled

Conditions

Name	Value
ApplicationsExclude	VMware Horizon - Unified Access Gateway(17a58be3-afbe-45c4-a4ab-4e7640c285fc)
ApplicationsInclude	All
ApplicationsIncludeUserActions
ClientAppTypes	all
Devices
DeviceStates
LocationsExclude	AllTrusted
LocationsInclude	All
PlatformsExclude
PlatformsInclude	macOS
SignInRiskLevel
UsersExclude
UsersExcludeGroups	R_Intune_Mobile_AccessR_AAD_Offshore_Access_Mobile
UsersExcludeRoles
UsersInclude	All
UsersIncludeGroups
UsersIncludeRoles

Grant Controls

Name	Value
BuiltInControls	compliantDevice
CustomControls
Operator	OR
TermsOfUse

Session Controls

Name	Value
ApplicationEnforcedRestriction
CloudAppSecurity
CloudAppSecurityType
PersistentBrowser
PersistentBrowserMode
SignInFrequency	True
SignInFrequencyTimeframe	7 days

CA - CCX - Global - Block Linux External Access

Metadata

Name	Value
Created	2022-08-09T15:32:33.3564342Z
DisplayName	CA - CCX - Global - Block Linux External Access
Id	a0463337-0645-4708-b0e5-98e5966e1f55
Modified	2025-01-03T13:36:42.5390569Z
State	enabled

Conditions

Name	Value
ApplicationsExclude	VMware Horizon - Unified Access Gateway(17a58be3-afbe-45c4-a4ab-4e7640c285fc)
ApplicationsInclude	All
ApplicationsIncludeUserActions
ClientAppTypes	all
Devices
DeviceStates
LocationsExclude	0e8b6659-0af2-4ead-bf4d-fc7a69efe298
LocationsInclude	All
PlatformsExclude
PlatformsInclude	linux
SignInRiskLevel
UsersExclude
UsersExcludeGroups	R_Intune_Mobile_AccessR_AAD_Offshore_Access_Mobile
UsersExcludeRoles
UsersInclude	All
UsersIncludeGroups
UsersIncludeRoles

Grant Controls

Name	Value
BuiltInControls	block
CustomControls
Operator	OR
TermsOfUse

Session Controls

Name	Value
ApplicationEnforcedRestriction
CloudAppSecurity
CloudAppSecurityType
PersistentBrowser
PersistentBrowserMode
SignInFrequency
SignInFrequencyTimeframe

CA - CCX - M365 - Grant Hybrid Join Access - Windows

Metadata

Name	Value
Created	2022-08-15T12:15:36.5634255Z
DisplayName	CA - CCX - M365 - Grant Hybrid Join Access - Windows
Id	59e77730-c800-4952-8708-f34b80a3267d
Modified	2025-05-12T18:32:36.5341764Z
State	enabled

Conditions

Name	Value
ApplicationsExclude
ApplicationsInclude	Adobe Identity Management (OIDC)(6aba272b-e383-44cd-8eda-34c66dfd9546) Adobe Workfront(a846bde4-f407-45ea-ad51-c0fc77a0bb16) MicrosoftAdminPortals Windows Azure Service Management API(797f4846-ba00-4fd7-ba43-dac1f8f63013) Office365
ApplicationsIncludeUserActions
ClientAppTypes	all
Devices	@{includeDeviceStates=System.Object[]; excludeDeviceStates=System.Object[]; includeDevices=System.Object[]; excludeDevices=System.Object[]; deviceFilter=}
DeviceStates
LocationsExclude	0e8b6659-0af2-4ead-bf4d-fc7a69efe298
LocationsInclude	All
PlatformsExclude
PlatformsInclude	windows
SignInRiskLevel
UsersExclude	iCIMS Candidate Tracking Service Account(iCIMSCandidate.TrackingServiceAccount@carecentrix.com)
UsersExcludeGroups	R_Intune_Mobile_AccessR_AAD_Offshore_Access_MobileAAD_MEM_Autopilot_Troubleshooting
UsersExcludeRoles
UsersInclude	All
UsersIncludeGroups
UsersIncludeRoles

Grant Controls

Name	Value
BuiltInControls	domainJoinedDevice
CustomControls
Operator	OR
TermsOfUse

Session Controls

Name	Value
ApplicationEnforcedRestriction
CloudAppSecurity
CloudAppSecurityType
PersistentBrowser
PersistentBrowserMode
SignInFrequency	True
SignInFrequencyTimeframe	10 days

CA - CCX - PAGlobalProtect - Require MFA

Metadata

Name	Value
Created	2022-09-02T13:29:38.5885644Z
DisplayName	CA - CCX - PAGlobalProtect - Require MFA
Id	64f6402e-fc9d-4fcb-bffc-8a7fe2b433c9
Modified	2023-03-21T20:08:34.4480472Z
State	enabled

Conditions

Name	Value
ApplicationsExclude
ApplicationsInclude	Palo Alto Networks - GlobalProtect(96c5df68-2489-4cd6-9f01-a25a1ebd5071)
ApplicationsIncludeUserActions
ClientAppTypes	all
Devices
DeviceStates
LocationsExclude
LocationsInclude
PlatformsExclude
PlatformsInclude
SignInRiskLevel
UsersExclude
UsersExcludeGroups	R_Intune_Mobile_AccessR_AAD_Offshore_Access_MobileAAD_MEM_Autopilot_Troubleshooting
UsersExcludeRoles
UsersInclude	All
UsersIncludeGroups
UsersIncludeRoles

Grant Controls

Name	Value
BuiltInControls	mfa
CustomControls
Operator	OR
TermsOfUse

Session Controls

Name	Value
ApplicationEnforcedRestriction
CloudAppSecurity
CloudAppSecurityType
PersistentBrowser
PersistentBrowserMode
SignInFrequency	True
SignInFrequencyTimeframe	4 hours

CA - CCX - Intune Enrollment - Enforce MFA

Metadata

Name	Value
Created	2022-09-21T19:10:46.3478047Z
DisplayName	CA - CCX - Intune Enrollment - Enforce MFA
Id	7d52c0ab-d842-47c5-b4ca-a1597e64eb9f
Modified	2024-05-22T18:52:16.9516782Z
State	enabled

Conditions

Name	Value
ApplicationsExclude
ApplicationsInclude	Microsoft Intune Enrollment(d4ebce55-015a-49b5-a083-c84d1797ae8c)
ApplicationsIncludeUserActions
ClientAppTypes	all
Devices	@{includeDeviceStates=System.Object[]; excludeDeviceStates=System.Object[]; includeDevices=System.Object[]; excludeDevices=System.Object[]; deviceFilter=}
DeviceStates
LocationsExclude	0e8b6659-0af2-4ead-bf4d-fc7a69efe298
LocationsInclude	All
PlatformsExclude	android,iOS,macOS
PlatformsInclude	windows
SignInRiskLevel
UsersExclude
UsersExcludeGroups	R_Intune_Mobile_AccessR_AAD_Offshore_Access_MobileAAD_MEM_Autopilot_Troubleshooting
UsersExcludeRoles
UsersInclude	All
UsersIncludeGroups
UsersIncludeRoles

Grant Controls

Name	Value
BuiltInControls	mfa,compliantDevice
CustomControls
Operator	OR
TermsOfUse

Session Controls

Name	Value
ApplicationEnforcedRestriction
CloudAppSecurity
CloudAppSecurityType
PersistentBrowser
PersistentBrowserMode
SignInFrequency	True
SignInFrequencyTimeframe	5 days

CA - CCX - M365 - Grant Compliance Access - AutoPilot

Metadata

Name	Value
Created	2022-09-22T16:04:32.3335064Z
DisplayName	CA - CCX - M365 - Grant Compliance Access - AutoPilot
Id	c7dc70c0-e9f8-4e15-9781-a77af3800385
Modified	2023-01-20T19:55:54.1432067Z
State	enabled

Conditions

Name	Value
ApplicationsExclude
ApplicationsInclude	Office365
ApplicationsIncludeUserActions
ClientAppTypes	all
Devices	@{includeDeviceStates=System.Object[]; excludeDeviceStates=System.Object[]; includeDevices=System.Object[]; excludeDevices=System.Object[]; deviceFilter=}
DeviceStates
LocationsExclude	0e8b6659-0af2-4ead-bf4d-fc7a69efe298
LocationsInclude	All
PlatformsExclude
PlatformsInclude	windows
SignInRiskLevel
UsersExclude
UsersExcludeGroups	R_Intune_Mobile_AccessR_AAD_Offshore_Access_MobileAAD_MEM_Autopilot_Troubleshooting
UsersExcludeRoles
UsersInclude	All
UsersIncludeGroups
UsersIncludeRoles

Grant Controls

Name	Value
BuiltInControls	compliantDevice
CustomControls
Operator	OR
TermsOfUse

Session Controls

Name	Value
ApplicationEnforcedRestriction
CloudAppSecurity
CloudAppSecurityType
PersistentBrowser
PersistentBrowserMode
SignInFrequency	True
SignInFrequencyTimeframe	10 days

ZZZ - CA - CCX - M365 - Grant O365 Calendar Access - iOS

Metadata

Name	Value
Created	2022-10-12T20:28:29.7053954Z
DisplayName	ZZZ - CA - CCX - M365 - Grant O365 Calendar Access - iOS
Id	00307607-8bb1-4eb9-96c6-95ecab7ad932
Modified	2024-06-14T13:52:07.4310621Z
State	disabled

Conditions

Name	Value
ApplicationsExclude
ApplicationsInclude	Office365
ApplicationsIncludeUserActions
ClientAppTypes	exchangeActiveSync
Devices
DeviceStates
LocationsExclude
LocationsInclude
PlatformsExclude	android,windows,windowsPhone,macOS,linux
PlatformsInclude	iOS
SignInRiskLevel
UsersExclude
UsersExcludeGroups	R_Intune_Mobile_AccessR_AAD_Offshore_Access_MobileAAD_MEM_Autopilot_Troubleshooting
UsersExcludeRoles
UsersInclude
UsersIncludeGroups	AAD_MEM_iOS_Calendar_Sync
UsersIncludeRoles

Grant Controls

Name	Value
BuiltInControls	mfa,compliantDevice
CustomControls
Operator	AND
TermsOfUse

Session Controls

Name	Value
ApplicationEnforcedRestriction
CloudAppSecurity
CloudAppSecurityType
PersistentBrowser
PersistentBrowserMode
SignInFrequency
SignInFrequencyTimeframe

CA - CCX - MEM - Grant Compliance Access - Mobile

Metadata

Name	Value
Created	2022-10-26T12:30:44.5653473Z
DisplayName	CA - CCX - MEM - Grant Compliance Access - Mobile
Id	dbc6f77d-9990-4625-b347-214a0327ff6f
Modified	2025-05-19T13:45:58.961663Z
State	enabled

Conditions

Name	Value
ApplicationsExclude
ApplicationsInclude	Workday (Prod)(4b61b374-6382-428c-8ef4-ec028803b626) Adobe Workfront(a846bde4-f407-45ea-ad51-c0fc77a0bb16) Adobe Identity Management (OIDC)(6aba272b-e383-44cd-8eda-34c66dfd9546) Graph API(ba7a4277-b289-4a26-991b-f5dfc94aada3) MicrosoftAdminPortals Workday (CCX2)(bea684e8-d221-4334-be55-df87934e91a8) Workday (CCX1)(60377700-b284-4127-8cd7-c1a8eaba2012)
ApplicationsIncludeUserActions
ClientAppTypes	browser,mobileAppsAndDesktopClients
Devices
DeviceStates
LocationsExclude
LocationsInclude
PlatformsExclude
PlatformsInclude	android,iOS
SignInRiskLevel
UsersExclude	Amason, Andrew(Andrew.Amason@carecentrix.com)
UsersExcludeGroups	R_Intune_Mobile_AccessR_AAD_Offshore_Access_MobileAAD_MEM_Autopilot_Troubleshooting
UsersExcludeRoles
UsersInclude
UsersIncludeGroups	R_Intune_Mobile_Access
UsersIncludeRoles

Grant Controls

Name	Value
BuiltInControls	compliantDevice
CustomControls
Operator	OR
TermsOfUse

Session Controls

Name	Value
ApplicationEnforcedRestriction
CloudAppSecurity
CloudAppSecurityType
PersistentBrowser
PersistentBrowserMode
SignInFrequency
SignInFrequencyTimeframe

CA - CCX - MEM - Autopilot Troubleshooting

Metadata

Name	Value
Created	2022-10-27T21:33:11.7093232Z
DisplayName	CA - CCX - MEM - Autopilot Troubleshooting
Id	285eaffe-3a88-4ad6-810b-3adcf01703c2
Modified	2025-02-21T13:37:55.172635Z
State	enabled

Conditions

Name	Value
ApplicationsExclude
ApplicationsInclude	Graph API(ba7a4277-b289-4a26-991b-f5dfc94aada3) Microsoft Intune(0000000a-0000-0000-c000-000000000000) Microsoft Intune Enrollment(d4ebce55-015a-49b5-a083-c84d1797ae8c)
ApplicationsIncludeUserActions
ClientAppTypes	all
Devices
DeviceStates
LocationsExclude
LocationsInclude
PlatformsExclude
PlatformsInclude
SignInRiskLevel
UsersExclude
UsersExcludeGroups	R_Intune_Mobile_AccessR_AAD_Offshore_Access_MobileAAD_MEM_Autopilot_Troubleshooting
UsersExcludeRoles
UsersInclude
UsersIncludeGroups	AAD_MEM_Autopilot_Troubleshooting
UsersIncludeRoles

Grant Controls

Name	Value
BuiltInControls	mfa
CustomControls
Operator	OR
TermsOfUse

Session Controls

Name	Value
ApplicationEnforcedRestriction
CloudAppSecurity
CloudAppSecurityType
PersistentBrowser
PersistentBrowserMode
SignInFrequency	True
SignInFrequencyTimeframe	1 hours

CA - CCX - CyberArk - Require MFA

Metadata

Name	Value
Created	2022-11-18T19:27:03.7597384Z
DisplayName	CA - CCX - CyberArk - Require MFA
Id	4bdb9a13-7aaa-4bf4-95b3-fdd5adde1215
Modified	2025-05-09T20:27:54.8528808Z
State	enabled

Conditions

Name	Value
ApplicationsExclude
ApplicationsInclude	CCX-CyberArk SAML Authentication PVWA 2025(bc15cc8a-6189-4de4-9580-fb7a1b59a186) CCX-CyberArk SAML Authentication(d9e999f7-f8d9-484b-9717-2fe1c0949ad5)
ApplicationsIncludeUserActions
ClientAppTypes	all
Devices
DeviceStates
LocationsExclude
LocationsInclude
PlatformsExclude
PlatformsInclude
SignInRiskLevel
UsersExclude
UsersExcludeGroups	R_Intune_Mobile_AccessR_AAD_Offshore_Access_MobileAAD_MEM_Autopilot_Troubleshooting
UsersExcludeRoles
UsersInclude	All
UsersIncludeGroups
UsersIncludeRoles

Grant Controls

Name	Value
BuiltInControls	mfa
CustomControls
Operator	OR
TermsOfUse

Session Controls

Name	Value
ApplicationEnforcedRestriction
CloudAppSecurity
CloudAppSecurityType
PersistentBrowser
PersistentBrowserMode
SignInFrequency	True
SignInFrequencyTimeframe	1 hours

CA - CCX - Salesforce - Require MFA

Metadata

Name	Value
Created	2023-02-09T15:30:50.8612667Z
DisplayName	CA - CCX - Salesforce - Require MFA
Id	8ac99af1-b5de-4434-ad1e-fb5439937a91
Modified	2023-04-21T01:14:42.0273544Z
State	enabled

Conditions

Name	Value
ApplicationsExclude
ApplicationsInclude	Salesforce - HomeBridge Org1 (Prod)(a3c7328f-ae5e-484f-b430-4c3c0136d991) Salesforce Hombridge1 (pjdev Sandbox)(45e5f412-c3ba-4203-8eed-4d9a087604e9) Salesforce Hombridge1 (Backup1 Sandbox)(4f9900f4-fd9f-45dd-a0a6-91ee304d987a) Salesforce Sales (MFA Sandbox)(3ace8261-b1cf-4c6a-b61f-325981299fca) (35c4adb6-2eb7-4e65-a989-50dddb870850) Salesforce Hombridge1 (MFA Sandbox)(0489475e-c795-4943-9253-b688eb4cea33)
ApplicationsIncludeUserActions
ClientAppTypes	all
Devices
DeviceStates
LocationsExclude
LocationsInclude
PlatformsExclude
PlatformsInclude
SignInRiskLevel
UsersExclude
UsersExcludeGroups	R_Intune_Mobile_AccessR_AAD_Offshore_Access_MobileAAD_MEM_Autopilot_Troubleshooting
UsersExcludeRoles
UsersInclude	All
UsersIncludeGroups
UsersIncludeRoles

Grant Controls

Name	Value
BuiltInControls	mfa
CustomControls
Operator	OR
TermsOfUse

Session Controls

Name	Value
ApplicationEnforcedRestriction
CloudAppSecurity
CloudAppSecurityType
PersistentBrowser
PersistentBrowserMode
SignInFrequency
SignInFrequencyTimeframe

CA - CCX - M365 - Grant ABM Access

Metadata

Name	Value
Created	2023-05-18T13:30:48.7571343Z
DisplayName	CA - CCX - M365 - Grant ABM Access
Id	8ed226b3-fbb5-4a9f-9e39-c8d4e32aa7a9
Modified
State	enabled

Conditions

Name	Value
ApplicationsExclude
ApplicationsInclude	Apple Business Manager(fc67d51f-bf39-4530-8155-3714f897281b) Apple Internet Accounts(f8d98a96-0999-43f5-8af3-69971c7bb423)
ApplicationsIncludeUserActions
ClientAppTypes	all
Devices
DeviceStates
LocationsExclude
LocationsInclude
PlatformsExclude
PlatformsInclude	android,iOS
SignInRiskLevel
UsersExclude
UsersExcludeGroups	R_Intune_Mobile_AccessR_AAD_Offshore_Access_MobileAAD_MEM_Autopilot_Troubleshooting
UsersExcludeRoles
UsersInclude
UsersIncludeGroups	R_Intune_Mobile_Access
UsersIncludeRoles

Grant Controls

Name	Value
BuiltInControls	mfa
CustomControls
Operator	OR
TermsOfUse

Session Controls

Name	Value
ApplicationEnforcedRestriction
CloudAppSecurity
CloudAppSecurityType
PersistentBrowser
PersistentBrowserMode
SignInFrequency
SignInFrequencyTimeframe

CA - CCX - Global - Block access for unknown or unsupported device platform

Metadata

Name	Value
Created	2023-06-27T19:19:49.4479974Z
DisplayName	CA - CCX - Global - Block access for unknown or unsupported device platform
Id	078daecb-3500-4641-9a2d-0f4486ffac05
Modified	2024-05-22T17:24:39.0407319Z
State	enabled

Conditions

Name	Value
ApplicationsExclude
ApplicationsInclude	All
ApplicationsIncludeUserActions
ClientAppTypes	all
Devices
DeviceStates
LocationsExclude
LocationsInclude
PlatformsExclude	android,iOS,windows,windowsPhone,macOS,linux
PlatformsInclude	all
SignInRiskLevel
UsersExclude	Boatright, Kevin(Kevin.Boatright@carecentrix.com)
UsersExcludeGroups	R_Intune_Mobile_AccessR_AAD_Offshore_Access_MobileAAD_MEM_Autopilot_Troubleshooting
UsersExcludeRoles
UsersInclude	All
UsersIncludeGroups
UsersIncludeRoles

Grant Controls

Name	Value
BuiltInControls	block
CustomControls
Operator	OR
TermsOfUse

Session Controls

Name	Value
ApplicationEnforcedRestriction
CloudAppSecurity
CloudAppSecurityType
PersistentBrowser
PersistentBrowserMode
SignInFrequency
SignInFrequencyTimeframe

CA - CCX - Global - Block legacy authentication

Metadata

Name	Value
Created	2023-07-05T18:46:02.5563718Z
DisplayName	CA - CCX - Global - Block legacy authentication
Id	68063282-76fe-475d-9177-cf17f411f4f4
Modified	2024-06-23T00:02:11.9459079Z
State	enabled

Conditions

Name	Value
ApplicationsExclude
ApplicationsInclude	All
ApplicationsIncludeUserActions
ClientAppTypes	exchangeActiveSync,other
Devices
DeviceStates
LocationsExclude
LocationsInclude
PlatformsExclude
PlatformsInclude
SignInRiskLevel
UsersExclude	Amason, Andrew(Andrew.Amason@carecentrix.com)
UsersExcludeGroups	R_Intune_Mobile_AccessR_AAD_Offshore_Access_MobileAAD_MEM_Autopilot_Troubleshooting
UsersExcludeRoles
UsersInclude	All
UsersIncludeGroups
UsersIncludeRoles

Grant Controls

Name	Value
BuiltInControls	block
CustomControls
Operator	OR
TermsOfUse

Session Controls

Name	Value
ApplicationEnforcedRestriction
CloudAppSecurity
CloudAppSecurityType
PersistentBrowser
PersistentBrowserMode
SignInFrequency
SignInFrequencyTimeframe

CCX - CA - Block Hourly Users from Connection outside of logonhours

Metadata

Name	Value
Created	2023-08-03T18:02:44.4020998Z
DisplayName	CCX - CA - Block Hourly Users from Connection outside of logonhours
Id	34e6cec4-2896-45f3-9a70-240b29b9a7a9
Modified	2024-11-16T14:02:50.4320079Z
State	enabledForReportingButNotEnforced

Conditions

Name	Value
ApplicationsExclude
ApplicationsInclude	Palo Alto Networks - GlobalProtect(96c5df68-2489-4cd6-9f01-a25a1ebd5071) Office365
ApplicationsIncludeUserActions
ClientAppTypes	all
Devices
DeviceStates
LocationsExclude
LocationsInclude
PlatformsExclude
PlatformsInclude	all
SignInRiskLevel
UsersExclude
UsersExcludeGroups	R_Intune_Mobile_AccessR_AAD_Offshore_Access_MobileAAD_MEM_Autopilot_TroubleshootingR_Allow_Bypass_TimeRestriction
UsersExcludeRoles
UsersInclude
UsersIncludeGroups	R_Block_All_Access R_Block_All_Access_RCM
UsersIncludeRoles

Grant Controls

Name	Value
BuiltInControls	block
CustomControls
Operator	OR
TermsOfUse

Session Controls

Name	Value
ApplicationEnforcedRestriction
CloudAppSecurity
CloudAppSecurityType
PersistentBrowser
PersistentBrowserMode
SignInFrequency
SignInFrequencyTimeframe

CA - CCX - M365 - Grant Compliance Access - Windows

Metadata

Name	Value
Created	2023-11-09T19:51:02.4973061Z
DisplayName	CA - CCX - M365 - Grant Compliance Access - Windows
Id	fbf4a646-01d9-40a1-ac13-83571d5f72ff
Modified	2024-01-04T19:14:16.7230578Z
State	enabledForReportingButNotEnforced

Conditions

Name	Value
ApplicationsExclude
ApplicationsInclude	All
ApplicationsIncludeUserActions
ClientAppTypes	all
Devices
DeviceStates
LocationsExclude	0e8b6659-0af2-4ead-bf4d-fc7a69efe298
LocationsInclude	All
PlatformsExclude
PlatformsInclude	windows
SignInRiskLevel
UsersExclude
UsersExcludeGroups	R_Intune_Mobile_AccessR_AAD_Offshore_Access_MobileAAD_MEM_Autopilot_TroubleshootingR_Allow_Bypass_TimeRestriction
UsersExcludeRoles
UsersInclude	Nguyen, Christopher(Christopher.Nguyen@carecentrix.com) Amason, Andrew(Andrew.Amason@carecentrix.com)
UsersIncludeGroups
UsersIncludeRoles

Grant Controls

Name	Value
BuiltInControls	compliantDevice
CustomControls
Operator	OR
TermsOfUse

Session Controls

Name	Value
ApplicationEnforcedRestriction
CloudAppSecurity
CloudAppSecurityType
PersistentBrowser
PersistentBrowserMode
SignInFrequency
SignInFrequencyTimeframe

Microsoft-managed: Multifactor authentication for admins accessing Microsoft Admin Portals

Metadata

Name	Value
Created	2023-11-13T22:46:21.4971797Z
DisplayName	Microsoft-managed: Multifactor authentication for admins accessing Microsoft Admin Portals
Id	86b5910c-dcba-432d-8e92-761c89592fc2
Modified	2024-06-10T20:43:09.6885003Z
State	enabled

Conditions

Name	Value
ApplicationsExclude
ApplicationsInclude	MicrosoftAdminPortals
ApplicationsIncludeUserActions
ClientAppTypes	all
Devices
DeviceStates
LocationsExclude
LocationsInclude
PlatformsExclude
PlatformsInclude
SignInRiskLevel
UsersExclude
UsersExcludeGroups	R_Intune_Mobile_AccessR_AAD_Offshore_Access_MobileAAD_MEM_Autopilot_TroubleshootingR_Allow_Bypass_TimeRestriction
UsersExcludeRoles
UsersInclude
UsersIncludeGroups
UsersIncludeRoles	Global Administrator Security Administrator SharePoint Administrator Exchange Administrator Conditional Access Administrator Helpdesk Administrator Billing Administrator User Administrator Authentication Administrator Application Administrator Cloud Application Administrator Password Administrator Privileged Authentication Administrator Privileged Role Administrator

Grant Controls

Name	Value
BuiltInControls	mfa
CustomControls
Operator	OR
TermsOfUse

Session Controls

Name	Value
ApplicationEnforcedRestriction
CloudAppSecurity
CloudAppSecurityType
PersistentBrowser
PersistentBrowserMode
SignInFrequency
SignInFrequencyTimeframe

CA - CCX - Horizon VDI - Require MFA

Metadata

Name	Value
Created	2024-02-09T15:51:46.3678241Z
DisplayName	CA - CCX - Horizon VDI - Require MFA
Id	c46f1758-eeb3-4fc9-8127-4f65214e051b
Modified
State	enabled

Conditions

Name	Value
ApplicationsExclude
ApplicationsInclude	VMware Horizon - Unified Access Gateway(17a58be3-afbe-45c4-a4ab-4e7640c285fc)
ApplicationsIncludeUserActions
ClientAppTypes	all
Devices
DeviceStates
LocationsExclude
LocationsInclude
PlatformsExclude
PlatformsInclude
SignInRiskLevel
UsersExclude
UsersExcludeGroups	R_Intune_Mobile_AccessR_AAD_Offshore_Access_MobileAAD_MEM_Autopilot_TroubleshootingR_Allow_Bypass_TimeRestriction
UsersExcludeRoles
UsersInclude	All
UsersIncludeGroups
UsersIncludeRoles

Grant Controls

Name	Value
BuiltInControls	mfa
CustomControls
Operator	OR
TermsOfUse

Session Controls

Name	Value
ApplicationEnforcedRestriction
CloudAppSecurity
CloudAppSecurityType
PersistentBrowser
PersistentBrowserMode
SignInFrequency
SignInFrequencyTimeframe

CA - CCX - MEM - Grant Compliance Access - App Protection - Mobile

Metadata

Name	Value
Created	2024-05-01T17:36:58.904788Z
DisplayName	CA - CCX - MEM - Grant Compliance Access - App Protection - Mobile
Id	e50a2e91-a37f-43e0-a623-b19606cd19b8
Modified	2025-05-12T18:31:37.3953553Z
State	enabled

Conditions

Name	Value
ApplicationsExclude	Adobe Workfront(a846bde4-f407-45ea-ad51-c0fc77a0bb16) Adobe Identity Management (OIDC)(6aba272b-e383-44cd-8eda-34c66dfd9546) Graph API(ba7a4277-b289-4a26-991b-f5dfc94aada3) MicrosoftAdminPortals Workday (CCX2)(bea684e8-d221-4334-be55-df87934e91a8) Workday (CCX1)(60377700-b284-4127-8cd7-c1a8eaba2012) iCares Acheivers Prod(89a8edbd-eda9-408a-86e2-b1791c34acaf) iCares Achievers Non-Prod(1278cadf-4d1f-4da4-af94-b04bfebae3a2) VMware Horizon - Unified Access Gateway(17a58be3-afbe-45c4-a4ab-4e7640c285fc)
ApplicationsInclude	All
ApplicationsIncludeUserActions
ClientAppTypes	browser,mobileAppsAndDesktopClients
Devices
DeviceStates
LocationsExclude
LocationsInclude
PlatformsExclude
PlatformsInclude	android,iOS
SignInRiskLevel
UsersExclude
UsersExcludeGroups	R_Intune_Mobile_AccessR_AAD_Offshore_Access_MobileAAD_MEM_Autopilot_TroubleshootingR_Allow_Bypass_TimeRestriction
UsersExcludeRoles
UsersInclude
UsersIncludeGroups	R_Intune_Mobile_Access
UsersIncludeRoles

Grant Controls

Name	Value
BuiltInControls	compliantDevice,compliantApplication
CustomControls
Operator	AND
TermsOfUse

Session Controls

Name	Value
ApplicationEnforcedRestriction
CloudAppSecurity
CloudAppSecurityType
PersistentBrowser
PersistentBrowserMode
SignInFrequency
SignInFrequencyTimeframe

CA - CCX - Global - Restrict Desktop Access to US

Metadata

Name	Value
Created	2024-05-14T16:21:34.1740646Z
DisplayName	CA - CCX - Global - Restrict Desktop Access to US
Id	4b2d07c0-3cf2-4810-847c-d2b3e533478e
Modified	2024-08-25T00:59:16.8055874Z
State	enabled

Conditions

Name	Value
ApplicationsExclude	VMware Horizon - Unified Access Gateway(17a58be3-afbe-45c4-a4ab-4e7640c285fc)
ApplicationsInclude	All
ApplicationsIncludeUserActions
ClientAppTypes	all
Devices
DeviceStates
LocationsExclude	133e40bf-ecd0-4bcd-8d4c-434fec8df72d
LocationsInclude	All
PlatformsExclude
PlatformsInclude	windows,macOS,linux
SignInRiskLevel
UsersExclude
UsersExcludeGroups	R_Intune_Mobile_AccessR_AAD_Offshore_Access_MobileAAD_MEM_Autopilot_TroubleshootingR_Allow_Bypass_TimeRestrictionR_AAD_Offshore_Access_Desktop
UsersExcludeRoles
UsersInclude	All
UsersIncludeGroups
UsersIncludeRoles

Grant Controls

Name	Value
BuiltInControls	block
CustomControls
Operator	OR
TermsOfUse

Session Controls

Name	Value
ApplicationEnforcedRestriction
CloudAppSecurity
CloudAppSecurityType
PersistentBrowser
PersistentBrowserMode
SignInFrequency
SignInFrequencyTimeframe

CA - CCX - Provider Portal - MFA POC - Require MFA

Metadata

Name	Value
Created	2024-06-17T18:52:54.4123008Z
DisplayName	CA - CCX - Provider Portal - MFA POC - Require MFA
Id	a20b3ea9-8f59-4d57-bfd5-1589c345da65
Modified	2024-06-21T21:09:19.9669461Z
State	enabled

Conditions

Name	Value
ApplicationsExclude
ApplicationsInclude	(2fa253eb-05fe-4877-9bdb-3c085f9288ac)
ApplicationsIncludeUserActions
ClientAppTypes	all
Devices
DeviceStates
LocationsExclude
LocationsInclude
PlatformsExclude
PlatformsInclude
SignInRiskLevel
UsersExclude
UsersExcludeGroups	R_Intune_Mobile_AccessR_AAD_Offshore_Access_MobileAAD_MEM_Autopilot_TroubleshootingR_Allow_Bypass_TimeRestrictionR_AAD_Offshore_Access_Desktop
UsersExcludeRoles
UsersInclude	All
UsersIncludeGroups
UsersIncludeRoles

Grant Controls

Name	Value
BuiltInControls	mfa
CustomControls
Operator	OR
TermsOfUse

Session Controls

Name	Value
ApplicationEnforcedRestriction
CloudAppSecurity
CloudAppSecurityType
PersistentBrowser
PersistentBrowserMode
SignInFrequency
SignInFrequencyTimeframe

CA - CCX - Nice - Require MFA

Metadata

Name	Value
Created	2024-08-01T16:41:41.0357993Z
DisplayName	CA - CCX - Nice - Require MFA
Id	f1849c07-5c67-458e-84ec-59514427ded1
Modified	2024-11-25T15:31:22.6475098Z
State	enabled

Conditions

Name	Value
ApplicationsExclude
ApplicationsInclude	NICE CXone - Troubleshooting(b4cc398a-99da-4eb5-a688-525a4b35a65d) NICE EEM(402a8daa-dc65-4c18-9842-beef25f7e084) NICE NDE(dc8bfd1a-51fb-42d5-9398-b4fe7791590b) Nice WFM(d0be22d3-0d40-431b-87a6-f26654b44694) NICE CXone(15cde0a7-7611-4432-8a8c-dd7d6eded99a)
ApplicationsIncludeUserActions
ClientAppTypes	all
Devices
DeviceStates
LocationsExclude
LocationsInclude
PlatformsExclude
PlatformsInclude
SignInRiskLevel
UsersExclude
UsersExcludeGroups	R_Intune_Mobile_AccessR_AAD_Offshore_Access_MobileAAD_MEM_Autopilot_TroubleshootingR_Allow_Bypass_TimeRestrictionR_AAD_Offshore_Access_Desktop
UsersExcludeRoles
UsersInclude	All
UsersIncludeGroups
UsersIncludeRoles

Grant Controls

Name	Value
BuiltInControls	mfa
CustomControls
Operator	OR
TermsOfUse

Session Controls

Name	Value
ApplicationEnforcedRestriction
CloudAppSecurity
CloudAppSecurityType
PersistentBrowser
PersistentBrowserMode
SignInFrequency
SignInFrequencyTimeframe

CA - CCX - AWS - Require MFA

Metadata

Name	Value
Created	2024-08-02T00:47:57.4759172Z
DisplayName	CA - CCX - AWS - Require MFA
Id	55a52b38-c772-4abf-aeca-79080fe165b3
Modified	2024-08-02T00:59:29.7448389Z
State	enabled

Conditions

Name	Value
ApplicationsExclude
ApplicationsInclude	AWS IAM Identity Center (CCX)(280da9ad-192a-4b64-a323-d9a7bf129d38)
ApplicationsIncludeUserActions
ClientAppTypes	all
Devices
DeviceStates
LocationsExclude
LocationsInclude
PlatformsExclude
PlatformsInclude
SignInRiskLevel
UsersExclude
UsersExcludeGroups	R_Intune_Mobile_AccessR_AAD_Offshore_Access_MobileAAD_MEM_Autopilot_TroubleshootingR_Allow_Bypass_TimeRestrictionR_AAD_Offshore_Access_Desktop
UsersExcludeRoles
UsersInclude	All
UsersIncludeGroups
UsersIncludeRoles

Grant Controls

Name	Value
BuiltInControls	mfa
CustomControls
Operator	OR
TermsOfUse

Session Controls

Name	Value
ApplicationEnforcedRestriction
CloudAppSecurity
CloudAppSecurityType
PersistentBrowser
PersistentBrowserMode
SignInFrequency	True
SignInFrequencyTimeframe	2 hours

CA - CCX - AWS - Require CCX Network/Devices

Metadata

Name	Value
Created	2024-08-02T01:02:34.44919Z
DisplayName	CA - CCX - AWS - Require CCX Network/Devices
Id	32e0efd9-8e39-4347-8ebb-e182954a08c6
Modified	2024-08-02T01:04:01.2516409Z
State	enabled

Conditions

Name	Value
ApplicationsExclude
ApplicationsInclude	AWS IAM Identity Center (CCX)(280da9ad-192a-4b64-a323-d9a7bf129d38)
ApplicationsIncludeUserActions
ClientAppTypes	all
Devices
DeviceStates
LocationsExclude	0e8b6659-0af2-4ead-bf4d-fc7a69efe298
LocationsInclude	All
PlatformsExclude
PlatformsInclude
SignInRiskLevel
UsersExclude
UsersExcludeGroups	R_Intune_Mobile_AccessR_AAD_Offshore_Access_MobileAAD_MEM_Autopilot_TroubleshootingR_Allow_Bypass_TimeRestrictionR_AAD_Offshore_Access_Desktop
UsersExcludeRoles
UsersInclude	All
UsersIncludeGroups
UsersIncludeRoles

Grant Controls

Name	Value
BuiltInControls	compliantDevice,domainJoinedDevice
CustomControls
Operator	OR
TermsOfUse

Session Controls

Name	Value
ApplicationEnforcedRestriction
CloudAppSecurity
CloudAppSecurityType
PersistentBrowser
PersistentBrowserMode
SignInFrequency
SignInFrequencyTimeframe

CA - CCX - NICE - Require CCX Network/Devices

Metadata

Name	Value
Created	2024-08-07T15:15:35.7189561Z
DisplayName	CA - CCX - NICE - Require CCX Network/Devices
Id	627ebbbf-90c6-4ddf-a8c3-84aac1a1de22
Modified	2024-11-25T15:31:59.5147857Z
State	enabled

Conditions

Name	Value
ApplicationsExclude
ApplicationsInclude	NICE CXone - Troubleshooting(b4cc398a-99da-4eb5-a688-525a4b35a65d) NICE NDE(dc8bfd1a-51fb-42d5-9398-b4fe7791590b) NICE CXone(15cde0a7-7611-4432-8a8c-dd7d6eded99a)
ApplicationsIncludeUserActions
ClientAppTypes	all
Devices
DeviceStates
LocationsExclude	0e8b6659-0af2-4ead-bf4d-fc7a69efe298
LocationsInclude	All
PlatformsExclude
PlatformsInclude
SignInRiskLevel
UsersExclude
UsersExcludeGroups	R_Intune_Mobile_AccessR_AAD_Offshore_Access_MobileAAD_MEM_Autopilot_TroubleshootingR_Allow_Bypass_TimeRestrictionR_AAD_Offshore_Access_Desktop
UsersExcludeRoles
UsersInclude	All
UsersIncludeGroups
UsersIncludeRoles

Grant Controls

Name	Value
BuiltInControls	compliantDevice,domainJoinedDevice
CustomControls
Operator	OR
TermsOfUse

Session Controls

Name	Value
ApplicationEnforcedRestriction
CloudAppSecurity
CloudAppSecurityType
PersistentBrowser
PersistentBrowserMode
SignInFrequency
SignInFrequencyTimeframe

CA - CCX - Provider Portal POC - Require MFA

Metadata

Name	Value
Created	2024-08-15T16:30:18.9291167Z
DisplayName	CA - CCX - Provider Portal POC - Require MFA
Id	7a87172e-5624-4e93-be26-05bb4aa6601f
Modified
State	enabled

Conditions

Name	Value
ApplicationsExclude
ApplicationsInclude	Provider Portal - MFA POC(020b856f-ddcb-4e88-8973-e413d00f96d3)
ApplicationsIncludeUserActions
ClientAppTypes	all
Devices
DeviceStates
LocationsExclude
LocationsInclude
PlatformsExclude
PlatformsInclude
SignInRiskLevel
UsersExclude
UsersExcludeGroups	R_Intune_Mobile_AccessR_AAD_Offshore_Access_MobileAAD_MEM_Autopilot_TroubleshootingR_Allow_Bypass_TimeRestrictionR_AAD_Offshore_Access_Desktop
UsersExcludeRoles
UsersInclude	All
UsersIncludeGroups
UsersIncludeRoles

Grant Controls

Name	Value
BuiltInControls	mfa
CustomControls
Operator	OR
TermsOfUse

Session Controls

Name	Value
ApplicationEnforcedRestriction
CloudAppSecurity
CloudAppSecurityType
PersistentBrowser
PersistentBrowserMode
SignInFrequency
SignInFrequencyTimeframe

CA - CCX - Bitwarden - Require MFA and CCX Device

Metadata

Name	Value
Created	2024-09-05T14:44:16.5552184Z
DisplayName	CA - CCX - Bitwarden - Require MFA and CCX Device
Id	60fa8cf3-5317-4694-ace3-2f6e9d8b0764
Modified	2024-11-12T19:19:04.479096Z
State	enabled

Conditions

Name	Value
ApplicationsExclude
ApplicationsInclude	Bitwarden SSO(1d934c2c-7c12-4e4a-8616-3dc5eb09c555)
ApplicationsIncludeUserActions
ClientAppTypes	all
Devices
DeviceStates
LocationsExclude	0e8b6659-0af2-4ead-bf4d-fc7a69efe298
LocationsInclude	All
PlatformsExclude
PlatformsInclude
SignInRiskLevel
UsersExclude
UsersExcludeGroups	R_Intune_Mobile_AccessR_AAD_Offshore_Access_MobileAAD_MEM_Autopilot_TroubleshootingR_Allow_Bypass_TimeRestrictionR_AAD_Offshore_Access_Desktop
UsersExcludeRoles
UsersInclude
UsersIncludeGroups	R_Bitwarden_Login_SSO
UsersIncludeRoles

Grant Controls

Name	Value
BuiltInControls	mfa,compliantDevice
CustomControls
Operator	AND
TermsOfUse

Session Controls

Name	Value
ApplicationEnforcedRestriction
CloudAppSecurity
CloudAppSecurityType
PersistentBrowser
PersistentBrowserMode
SignInFrequency	True
SignInFrequencyTimeframe	1 hours

CA - CCX - Proofpoint on Demand - Require MFA

Metadata

Name	Value
Created	2024-09-24T15:44:39.2994353Z
DisplayName	CA - CCX - Proofpoint on Demand - Require MFA
Id	86a2cac6-466d-4cfe-aa61-a3a4f73456d9
Modified
State	enabled

Conditions

Name	Value
ApplicationsExclude
ApplicationsInclude	Proofpoint on Demand(dbbf6b93-d68e-4f8d-9dab-a028b0e49a57)
ApplicationsIncludeUserActions
ClientAppTypes	all
Devices
DeviceStates
LocationsExclude
LocationsInclude
PlatformsExclude
PlatformsInclude
SignInRiskLevel
UsersExclude
UsersExcludeGroups	R_Intune_Mobile_AccessR_AAD_Offshore_Access_MobileAAD_MEM_Autopilot_TroubleshootingR_Allow_Bypass_TimeRestrictionR_AAD_Offshore_Access_Desktop
UsersExcludeRoles
UsersInclude	All
UsersIncludeGroups
UsersIncludeRoles

Grant Controls

Name	Value
BuiltInControls	mfa
CustomControls
Operator	OR
TermsOfUse

Session Controls

Name	Value
ApplicationEnforcedRestriction
CloudAppSecurity
CloudAppSecurityType
PersistentBrowser
PersistentBrowserMode
SignInFrequency
SignInFrequencyTimeframe

CA - CCX - Proofpoint Admin Portal - Require MFA

Metadata

Name	Value
Created	2024-09-24T15:58:30.6132496Z
DisplayName	CA - CCX - Proofpoint Admin Portal - Require MFA
Id	3322aa63-33d1-446a-9e16-31139a3fe54e
Modified	2024-09-25T14:53:55.5931791Z
State	enabled

Conditions

Name	Value
ApplicationsExclude
ApplicationsInclude	Proofpoint Admin Portal (POD)(5144935d-66fb-4662-ae74-0e62d4c44d7d)
ApplicationsIncludeUserActions
ClientAppTypes	all
Devices
DeviceStates
LocationsExclude
LocationsInclude
PlatformsExclude
PlatformsInclude
SignInRiskLevel
UsersExclude
UsersExcludeGroups	R_Intune_Mobile_AccessR_AAD_Offshore_Access_MobileAAD_MEM_Autopilot_TroubleshootingR_Allow_Bypass_TimeRestrictionR_AAD_Offshore_Access_Desktop
UsersExcludeRoles
UsersInclude	All
UsersIncludeGroups
UsersIncludeRoles

Grant Controls

Name	Value
BuiltInControls	mfa
CustomControls
Operator	OR
TermsOfUse

Session Controls

Name	Value
ApplicationEnforcedRestriction
CloudAppSecurity
CloudAppSecurityType
PersistentBrowser
PersistentBrowserMode
SignInFrequency
SignInFrequencyTimeframe

CA - CCX - NICE - Require CCX Network/Devices - WFM Reporting

Metadata

Name	Value
Created	2024-10-31T20:39:16.4989029Z
DisplayName	CA - CCX - NICE - Require CCX Network/Devices - WFM Reporting
Id	74f14456-2a20-4691-a1d0-32066032f3f8
Modified	2024-11-01T20:05:33.5959864Z
State	enabledForReportingButNotEnforced

Conditions

Name	Value
ApplicationsExclude
ApplicationsInclude	NICE EEM(402a8daa-dc65-4c18-9842-beef25f7e084) Nice WFM(d0be22d3-0d40-431b-87a6-f26654b44694)
ApplicationsIncludeUserActions
ClientAppTypes	all
Devices
DeviceStates
LocationsExclude	0e8b6659-0af2-4ead-bf4d-fc7a69efe298
LocationsInclude	All
PlatformsExclude	android,iOS,macOS,linux
PlatformsInclude	all
SignInRiskLevel
UsersExclude
UsersExcludeGroups	R_Intune_Mobile_AccessR_AAD_Offshore_Access_MobileAAD_MEM_Autopilot_TroubleshootingR_Allow_Bypass_TimeRestrictionR_AAD_Offshore_Access_Desktop
UsersExcludeRoles
UsersInclude	All
UsersIncludeGroups
UsersIncludeRoles

Grant Controls

Name	Value
BuiltInControls	compliantDevice,domainJoinedDevice
CustomControls
Operator	OR
TermsOfUse

Session Controls

Name	Value
ApplicationEnforcedRestriction
CloudAppSecurity
CloudAppSecurityType
PersistentBrowser
PersistentBrowserMode
SignInFrequency
SignInFrequencyTimeframe

Block TOR & Anonymous Proxies

Metadata

Name	Value
Created	2024-11-08T18:43:48.2142577Z
DisplayName	Block TOR & Anonymous Proxies
Id	19f10781-9820-4cb0-856e-13a634578895
Modified	2024-12-02T14:27:27.2306555Z
State	disabled

Conditions

Name	Value
ApplicationsExclude
ApplicationsInclude	All
ApplicationsIncludeUserActions
ClientAppTypes	all
Devices
DeviceStates
LocationsExclude
LocationsInclude
PlatformsExclude
PlatformsInclude
SignInRiskLevel
UsersExclude
UsersExcludeGroups	R_Intune_Mobile_AccessR_AAD_Offshore_Access_MobileAAD_MEM_Autopilot_TroubleshootingR_Allow_Bypass_TimeRestrictionR_AAD_Offshore_Access_Desktop
UsersExcludeRoles
UsersInclude	None
UsersIncludeGroups
UsersIncludeRoles

Grant Controls

Name	Value
BuiltInControls
CustomControls
Operator
TermsOfUse

Session Controls

Name	Value
ApplicationEnforcedRestriction
CloudAppSecurity	True
CloudAppSecurityType
PersistentBrowser
PersistentBrowserMode
SignInFrequency
SignInFrequencyTimeframe

CA - CCX - Bitwarden - Require MFA and CCX IP

Metadata

Name	Value
Created	2024-11-12T19:17:11.9020732Z
DisplayName	CA - CCX - Bitwarden - Require MFA and CCX IP
Id	ef4467fa-d9a9-4f3f-b245-cedb5f33fa7a
Modified	2024-11-13T15:20:45.047139Z
State	enabled

Conditions

Name	Value
ApplicationsExclude
ApplicationsInclude	Bitwarden SSO(1d934c2c-7c12-4e4a-8616-3dc5eb09c555)
ApplicationsIncludeUserActions
ClientAppTypes	all
Devices
DeviceStates
LocationsExclude
LocationsInclude	0e8b6659-0af2-4ead-bf4d-fc7a69efe298
PlatformsExclude
PlatformsInclude
SignInRiskLevel
UsersExclude
UsersExcludeGroups	R_Intune_Mobile_AccessR_AAD_Offshore_Access_MobileAAD_MEM_Autopilot_TroubleshootingR_Allow_Bypass_TimeRestrictionR_AAD_Offshore_Access_Desktop
UsersExcludeRoles
UsersInclude
UsersIncludeGroups	R_Bitwarden_Login_SSO
UsersIncludeRoles

Grant Controls

Name	Value
BuiltInControls	mfa
CustomControls
Operator	OR
TermsOfUse

Session Controls

Name	Value
ApplicationEnforcedRestriction
CloudAppSecurity
CloudAppSecurityType
PersistentBrowser
PersistentBrowserMode
SignInFrequency	True
SignInFrequencyTimeframe	1 hours

Supplimental: Multifactor authentication for admins accessing Microsoft Admin Portals COPY

Metadata

Name	Value
Created	2024-11-14T20:27:14.6239241Z
DisplayName	Supplimental: Multifactor authentication for admins accessing Microsoft Admin Portals COPY
Id	45fab5d2-a2af-4ec3-ae65-4f58686b14d1
Modified	2025-02-24T15:01:01.3827304Z
State	enabled

Conditions

Name	Value
ApplicationsExclude
ApplicationsInclude	MicrosoftAdminPortals
ApplicationsIncludeUserActions
ClientAppTypes	all
Devices
DeviceStates
LocationsExclude
LocationsInclude
PlatformsExclude
PlatformsInclude
SignInRiskLevel
UsersExclude	Amason, Andrew(Andrew.Amason@carecentrix.com)
UsersExcludeGroups	R_Intune_Mobile_AccessR_AAD_Offshore_Access_MobileAAD_MEM_Autopilot_TroubleshootingR_Allow_Bypass_TimeRestrictionR_AAD_Offshore_Access_Desktop
UsersExcludeRoles
UsersInclude
UsersIncludeGroups
UsersIncludeRoles	Exchange Administrator Global Reader Intune Administrator

Grant Controls

Name	Value
BuiltInControls	mfa
CustomControls
Operator	OR
TermsOfUse

Session Controls

Name	Value
ApplicationEnforcedRestriction
CloudAppSecurity
CloudAppSecurityType
PersistentBrowser
PersistentBrowserMode
SignInFrequency	True
SignInFrequencyTimeframe	2 hours

CA - CCX - MEM - Remote Help

Metadata

Name	Value
Created	2025-01-24T21:49:55.029118Z
DisplayName	CA - CCX - MEM - Remote Help
Id	5491b1de-b07d-4ad0-b35b-cd8d2041f2d2
Modified	2025-01-30T18:11:52.0065847Z
State	enabled

Conditions

Name	Value
ApplicationsExclude
ApplicationsInclude	RemoteAssistanceService(1dee7b72-b80d-4e56-933d-8b6b04f9a3e2)
ApplicationsIncludeUserActions
ClientAppTypes	all
Devices
DeviceStates
LocationsExclude
LocationsInclude
PlatformsExclude
PlatformsInclude
SignInRiskLevel
UsersExclude
UsersExcludeGroups	R_Intune_Mobile_AccessR_AAD_Offshore_Access_MobileAAD_MEM_Autopilot_TroubleshootingR_Allow_Bypass_TimeRestrictionR_AAD_Offshore_Access_Desktop
UsersExcludeRoles
UsersInclude
UsersIncludeGroups	AAD_Microsoft365_Licensing_RemoteHelp
UsersIncludeRoles

Grant Controls

Name	Value
BuiltInControls	mfa
CustomControls
Operator	OR
TermsOfUse

Session Controls

Name	Value
ApplicationEnforcedRestriction
CloudAppSecurity
CloudAppSecurityType
PersistentBrowser
PersistentBrowserMode
SignInFrequency
SignInFrequencyTimeframe

Microsoft-managed: Multifactor authentication and reauthentication for risky sign-ins

Metadata

Name	Value
Created	2025-02-13T01:38:04.1923904Z
DisplayName	Microsoft-managed: Multifactor authentication and reauthentication for risky sign-ins
Id	f501b837-3b2b-4e04-8cda-7680becf3e37
Modified	2025-05-14T20:02:03.06783Z
State	enabled

Conditions

Name	Value
ApplicationsExclude
ApplicationsInclude	All
ApplicationsIncludeUserActions
ClientAppTypes	all
Devices
DeviceStates
LocationsExclude
LocationsInclude
PlatformsExclude
PlatformsInclude
SignInRiskLevel	high
UsersExclude
UsersExcludeGroups	R_Intune_Mobile_AccessR_AAD_Offshore_Access_MobileAAD_MEM_Autopilot_TroubleshootingR_Allow_Bypass_TimeRestrictionR_AAD_Offshore_Access_Desktop
UsersExcludeRoles
UsersInclude
UsersIncludeGroups	Conditional Access: Risky sign-in multifactor authentication (a4ea6c0f-b8fb-4d29-91f1-9f8cf0601e98)
UsersIncludeRoles

Grant Controls

Name	Value
BuiltInControls	mfa
CustomControls
Operator	OR
TermsOfUse

Session Controls

Name	Value
ApplicationEnforcedRestriction
CloudAppSecurity
CloudAppSecurityType
PersistentBrowser
PersistentBrowserMode
SignInFrequency	True
SignInFrequencyTimeframe

Block VPN IP Ranges

Metadata

Name	Value
Created	2025-04-02T13:03:37.3048002Z
DisplayName	Block VPN IP Ranges
Id	fdbaf0e6-f585-4984-8a5b-e3204926c6f8
Modified	2025-04-02T15:22:37.4138687Z
State	enabled

Conditions

Name	Value
ApplicationsExclude
ApplicationsInclude	All
ApplicationsIncludeUserActions
ClientAppTypes	all
Devices
DeviceStates
LocationsExclude
LocationsInclude	00985883-fe80-46d2-aa8c-5e3aa8ebc24f
PlatformsExclude
PlatformsInclude
SignInRiskLevel
UsersExclude
UsersExcludeGroups	R_Intune_Mobile_AccessR_AAD_Offshore_Access_MobileAAD_MEM_Autopilot_TroubleshootingR_Allow_Bypass_TimeRestrictionR_AAD_Offshore_Access_Desktop
UsersExcludeRoles
UsersInclude	()
UsersIncludeGroups
UsersIncludeRoles

Grant Controls

Name	Value
BuiltInControls	block
CustomControls
Operator	OR
TermsOfUse

Session Controls

Name	Value
ApplicationEnforcedRestriction
CloudAppSecurity
CloudAppSecurityType
PersistentBrowser
PersistentBrowserMode
SignInFrequency
SignInFrequencyTimeframe

CA - CCX - Global - Block Windows Phone Access

Metadata

Name	Value
Created	2025-04-03T20:40:52.652171Z
DisplayName	CA - CCX - Global - Block Windows Phone Access
Id	a045b8c1-caa2-4444-8b26-d0eba0377900
Modified	2025-04-15T17:43:16.5472313Z
State	enabled

Conditions

Name	Value
ApplicationsExclude
ApplicationsInclude	All
ApplicationsIncludeUserActions
ClientAppTypes	all
Devices
DeviceStates
LocationsExclude
LocationsInclude
PlatformsExclude
PlatformsInclude	windowsPhone
SignInRiskLevel
UsersExclude	Amason, Andrew(Andrew.Amason@carecentrix.com)
UsersExcludeGroups	R_Intune_Mobile_AccessR_AAD_Offshore_Access_MobileAAD_MEM_Autopilot_TroubleshootingR_Allow_Bypass_TimeRestrictionR_AAD_Offshore_Access_Desktop
UsersExcludeRoles
UsersInclude	All
UsersIncludeGroups
UsersIncludeRoles

Grant Controls

Name	Value
BuiltInControls	block
CustomControls
Operator	OR
TermsOfUse

Session Controls

Name	Value
ApplicationEnforcedRestriction
CloudAppSecurity
CloudAppSecurityType
PersistentBrowser
PersistentBrowserMode
SignInFrequency
SignInFrequencyTimeframe

Microsoft-managed: Block device code flow

Metadata

Name	Value
Created	2025-04-22T00:41:54.9443682Z
DisplayName	Microsoft-managed: Block device code flow
Id	b3b9b82b-165e-4b31-a1aa-adb952835e62
Modified	2025-04-29T15:25:01.4610866Z
State	enabled

Conditions

Name	Value
ApplicationsExclude
ApplicationsInclude	All
ApplicationsIncludeUserActions
ClientAppTypes	all
Devices
DeviceStates
LocationsExclude
LocationsInclude
PlatformsExclude
PlatformsInclude
SignInRiskLevel
UsersExclude
UsersExcludeGroups	R_Intune_Mobile_AccessR_AAD_Offshore_Access_MobileAAD_MEM_Autopilot_TroubleshootingR_Allow_Bypass_TimeRestrictionR_AAD_Offshore_Access_Desktop
UsersExcludeRoles
UsersInclude	All
UsersIncludeGroups
UsersIncludeRoles

Grant Controls

Name	Value
BuiltInControls	block
CustomControls
Operator	OR
TermsOfUse

Session Controls

Name	Value
ApplicationEnforcedRestriction
CloudAppSecurity
CloudAppSecurityType
PersistentBrowser
PersistentBrowserMode
SignInFrequency
SignInFrequencyTimeframe

PIM Directory Roles

List the directory roles that are eligible assigned in the tenant.

Authentication Administrator

Allowed to view, set and reset authentication method information for any non-admin user.

@odata.type	displayName	id
#microsoft.graph.group	AAD_Role_DesktopOperators	0403cee4-a4e5-4223-a1a0-4f067c57f340
#microsoft.graph.user	Demarzio, Sarah	153d1311-ae1b-4984-baf1-90922e538c72

Intune Administrator

Can manage all aspects of the Intune product.

Compliance Administrator

Can read and manage compliance configuration and reports in Microsoft Entra ID and Microsoft 365.

@odata.type	displayName	id
#microsoft.graph.user	Bailey, Kito	e0ad6bb6-570e-438f-9f5d-69f93d1f4483
#microsoft.graph.user	Thomas, Shafton	f7c426bb-d2a4-429e-af06-6b625d1a1365

Security Administrator

Security Administrator allows ability to read and manage security configuration and reports.

Global Reader

Can read everything that a Global Administrator can, but not update anything.

@odata.type	displayName	id
#microsoft.graph.user	Foster, Keith	d86ae8d2-f56c-42d4-bf6f-1b90e822e6ba
#microsoft.graph.user	Devlin, Jacob	4d5cc9c5-942a-41a0-b5f9-26639cefe480
#microsoft.graph.user	Thomas, Shafton	f7c426bb-d2a4-429e-af06-6b625d1a1365
#microsoft.graph.user	Mihal, Victoria	87f25e18-c24a-45dc-80e0-f672eb2cd969

Cloud Device Administrator

Limited access to manage devices in Microsoft Entra ID.

Exchange Administrator

Can manage all aspects of the Exchange product.

Password Administrator

Can reset passwords for non-administrators and Password Administrators.

Directory Roles

List the directory roles that are activated in the tenant.

Authentication Administrator

Allowed to view, set and reset authentication method information for any non-admin user.

Intune Administrator

Can manage all aspects of the Intune product.

@odata.type	displayName	userPrincipalName
#microsoft.graph.directoryObject	Amason, Andrew	Andrew.Amason@carecentrix.com
#microsoft.graph.directoryObject	Grushinski, Stephen	Stephen.Grushinski@carecentrix.com
#microsoft.graph.directoryObject	Intune AD Connector	IntuneADConnector@carecentrix.onmicrosoft.com
#microsoft.graph.directoryObject	Service, SCCM	SCCM@carecentrix.onmicrosoft.com

License Administrator

Can manage product licenses on users and groups.

@odata.type	displayName	userPrincipalName
#microsoft.graph.directoryObject	Mihal, Victoria	Victoria.Mihal@carecentrix.com
#microsoft.graph.directoryObject	Prod Cloudficient O365	Prod_CF_O365@carecentrix.com

Teams Communications Administrator

Can manage calling and meetings features within the Microsoft Teams service.

@odata.type	displayName	userPrincipalName
#microsoft.graph.directoryObject	Ho, Davis	Davis.Ho@carecentrix.com
#microsoft.graph.directoryObject	Quade, Scott	Scott.Quade@carecentrix.com
#microsoft.graph.directoryObject	Foster, Keith	Keith.Foster@carecentrix.com

Reports Reader

Can read sign-in and audit reports.

@odata.type	displayName	userPrincipalName
#microsoft.graph.directoryObject	Quade, Scott	Scott.Quade@carecentrix.com
#microsoft.graph.directoryObject	Foster, Keith	Keith.Foster@carecentrix.com
#microsoft.graph.directoryObject	AAD_Authenication_Methods_Admins
#microsoft.graph.directoryObject	Demarzio, Sarah	Sarah.Demarzio@carecentrix.com

Compliance Administrator

Can read and manage compliance configuration and reports in Microsoft Entra ID and Microsoft 365.

@odata.type	displayName	userPrincipalName
#microsoft.graph.directoryObject	Amason, Andrew	Andrew.Amason@carecentrix.com
#microsoft.graph.directoryObject	Palmer, Dane	Dane.Palmer@carecentrix.com
#microsoft.graph.directoryObject	Grushinski, Stephen	Stephen.Grushinski@carecentrix.com

Directory Readers

Can read basic directory information. Commonly used to grant directory read access to applications and guests.

@odata.type	displayName	userPrincipalName
#microsoft.graph.directoryObject	Mizrahi, Samantha	Samantha.Mizrahi@carecentrix.com
#microsoft.graph.directoryObject	Palo Alto AAD Sync	PAAADSYNC@carecentrix.onmicrosoft.com

Global Reader

Can read everything that a Global Administrator can, but not update anything.

@odata.type	displayName	userPrincipalName
#microsoft.graph.directoryObject	Amason, Andrew	Andrew.Amason@carecentrix.com
#microsoft.graph.directoryObject	Macias, Daniel	Daniel.Macias@carecentrix.com
#microsoft.graph.directoryObject	Gonzalez, Robert	Robert.Gonzalez@carecentrix.com
#microsoft.graph.directoryObject	Ho, Davis	Davis.Ho@carecentrix.com
#microsoft.graph.directoryObject	Quade, Scott	Scott.Quade@carecentrix.com
#microsoft.graph.directoryObject	Hill, Phil	Phillip.Hill@carecentrix.com
#microsoft.graph.directoryObject	Mihal, Victoria	Victoria.Mihal@carecentrix.com
#microsoft.graph.directoryObject	Grushinski, Stephen	Stephen.Grushinski@carecentrix.com
#microsoft.graph.directoryObject	Mizrahi, Samantha	Samantha.Mizrahi@carecentrix.com
#microsoft.graph.directoryObject	Muston, Craig	Craig.Muston@carecentrix.com
#microsoft.graph.directoryObject	Susemihl, Jonathan	Jonathan.Susemihl@carecentrix.com
#microsoft.graph.directoryObject	Kats, Dale	Dale.Kats@carecentrix.com
#microsoft.graph.directoryObject	Richard, Alexandria	Alexandria.Richard@carecentrix.com
#microsoft.graph.directoryObject	Wong, Edward	Edward.Wong@carecentrix.com

Global Administrator

Can manage all aspects of Microsoft Entra ID and Microsoft services that use Microsoft Entra identities.

@odata.type	displayName	userPrincipalName
#microsoft.graph.directoryObject	Panter, Robert	robert.panter@carecentrix.com
#microsoft.graph.directoryObject	Roth, Carrie	Carrie.Roth@carecentrix.com
#microsoft.graph.directoryObject	Boatright, Kevin	Kevin.Boatright@carecentrix.com
#microsoft.graph.directoryObject	Amason, Andrew	Andrew.Amason@carecentrix.com
#microsoft.graph.directoryObject	Palmer, Dane	Dane.Palmer@carecentrix.com
#microsoft.graph.directoryObject	Boyles, Brian	Brian.Boyles@carecentrix.com
#microsoft.graph.directoryObject	Nguyen, Christopher	Christopher.Nguyen@carecentrix.com
#microsoft.graph.directoryObject	Hafer, Dan	Dan.Hafer@carecentrix.com
#microsoft.graph.directoryObject	Bailey, Kito	Kito.Bailey@carecentrix.com
#microsoft.graph.directoryObject	Bukovac, Jeremy	Jeremy.Bukovac@carecentrix.com

Directory Synchronization Accounts

Only used by Microsoft Entra Connect service.

Attribute Assignment Administrator

Assign custom security attribute keys and values to supported Microsoft Entra objects.

Billing Administrator

Can perform common billing related tasks like updating payment information.

@odata.type	displayName	userPrincipalName
#microsoft.graph.directoryObject	Amason, Andrew	Andrew.Amason@carecentrix.com
#microsoft.graph.directoryObject	Gast, Cal	Cal.Gast@carecentrix.com
#microsoft.graph.directoryObject	Mihal, Victoria	Victoria.Mihal@carecentrix.com

User Administrator

Can manage all aspects of users and groups, including resetting passwords for limited admins.

@odata.type	displayName	userPrincipalName
#microsoft.graph.directoryObject	Mihal, Victoria	Victoria.Mihal@carecentrix.com
#microsoft.graph.directoryObject	Grushinski, Stephen	Stephen.Grushinski@carecentrix.com

User Experience Success Manager

View product feedback, survey results, and reports to find training and communication opportunities.

@odata.type	displayName	userPrincipalName
#microsoft.graph.directoryObject	Gonzalez, Robert	Robert.Gonzalez@carecentrix.com
#microsoft.graph.directoryObject	Mihal, Victoria	Victoria.Mihal@carecentrix.com
#microsoft.graph.directoryObject	Grushinski, Stephen	Stephen.Grushinski@carecentrix.com

Desktop Analytics Administrator

Can access and manage Desktop management tools and services.

Teams Communications Support Engineer

Can troubleshoot communications issues within Teams using advanced tools.

Teams Administrator

Can manage the Microsoft Teams service.

@odata.type	displayName	userPrincipalName
#microsoft.graph.directoryObject	Ho, Davis	Davis.Ho@carecentrix.com
#microsoft.graph.directoryObject	Mihal, Victoria	Victoria.Mihal@carecentrix.com

Service Support Administrator

Can read service health information and manage support tickets.

Domains

Lists all domain associated with the tenant.

authenticationType	availabilityStatus	id	isAdminManaged	isDefault	isInitial	isRoot	isVerified	passwordNotificationWindowInDays	passwordValidityPeriodInDays	state	supportedServices
Managed		carecentrix.com	True	True	False	True	True				{Email, OfficeCommunicationsOnline, OrgIdAuthentication, Intune}
Managed		carecentrix.onmicrosoft.com	True	False	True	True	True				{Email, OfficeCommunicationsOnline}
Managed		carecentrix.mail.onmicrosoft.com	True	False	False	True	True				{}
Managed		SleepManagementSolutions.Com	True	False	False	True	True				{Email}

Identity Providers

Represents an Azure Active Directory (Azure AD) identity provider. The identity provider can be Microsoft, Google, Facebook, Amazon, LinkedIn, or Twitter. The following Identity Providers are in Preview: Weibo, QQ, WeChat, GitHub and any OpenID Connect supported providers.

@odata.type	displayName	id	identityProviderType	state	supportedTenantTypes
#microsoft.graph.builtInIdentityProvider	Azure Active Directory Sign up	AADSignup-OAUTH	AADSignup		entra
#microsoft.graph.builtInIdentityProvider	Email One Time Passcode	EmailOtpSignup-OAUTH	EmailOTP		entra
#microsoft.graph.builtInIdentityProvider	Microsoft Account	MSASignup-OAUTH	MicrosoftAccount		entra

Organization

Lists all Organizational settings.

CareCentrix, Inc.

Property	Value
businessPhones	{913-749-5696}
city	Hartford
country
countryLetterCode	US
createdDateTime	2015-01-30T07:01:39Z
deletedDateTime
directorySizeQuota
displayName	CareCentrix, Inc.
id	342619e0-4a9a-42e4-a66f-1ff9c85d08d6
isMultipleDataLocationsForServicesEnabled
marketingNotificationEmails	{}
onPremisesLastSyncDateTime	2025-05-19T19:30:42Z
onPremisesSyncEnabled	True
postalCode	06103-1246
preferredLanguage	en
privacyProfile
securityComplianceNotificationMails	{}
securityComplianceNotificationPhones	{}
state	ct
street	20 Church Street
technicalNotificationMails	{andrew.amason@carecentrix.com}
tenantType	AAD

AAD Policies

Mobility Management Policy

In Azure AD, a mobility management policy represents an auto-enrollment configuration for a mobility management (MDM or MAM) application. These policies are only applicable to devices based on Windows 10 OS and its derivatives (Surface Hub, Hololens etc.). Auto-enrollment enables organizations to automatically enroll devices into their chosen mobility management application as part of Azure AD join or Azure AD register process on Windows 10 devices.

Microsoft Intune

Property	Value
appliesTo	all
complianceUrl	https://portal.manage.microsoft.com/?portalAction=Compliance
description	Device Management Policy for Microsoft Intune
discoveryUrl	https://enrollment.manage.microsoft.com/enrollmentserver/discovery.svc
displayName	Microsoft Intune
id	0000000a-0000-0000-c000-000000000000
isValid	True
termsOfUseUrl	https://portal.manage.microsoft.com/TermsofUse.aspx

Samsung Knox Manage

Property	Value
appliesTo	none
complianceUrl	https://portal.manage.microsoft.com/?portalAction=Compliance
description	Device Management Policy for Samsung Knox Manage
discoveryUrl	https://crs.manage.samsungknox.com/crs/windows/enroll/discovery
displayName	Samsung Knox Manage
id	acffb494-d687-4dac-b04d-2e3117ac1d46
isValid	True
termsOfUseUrl	https://crs.manage.samsungknox.com/crs/windows/termsofuse.do

Permission Grant Policy

A permission grant policy is used to specify the conditions under which consent can be granted. A permission grant policy consists of a list of includes condition sets, and a list of excludes condition sets. For an event to match a permission grant policy, it must match at least one of the includes conditions sets, and none of the excludes condition sets.

All application permissions, for any client app

Property	Value
description	Includes all application permissions (app roles), for all APIs, for any client application.
displayName	All application permissions, for any client app
excludes	{}
excludes@odata.context	https://graph.microsoft.com/beta/$metadata#policies/permissionGrantPolicies('microsoft-all-application-permissions')/excludes
id	microsoft-all-application-permissions
includeAllPreApprovedApplications	False
includes	{@{id=bddda1ec-0174-44d5-84e2-47fb0ac01595; permissionClassification=all; permissionType=application; resourceApplication=any; permissions=System.Object[]; clientApplicationIds=System.Object[]; clientApplicationTenantIds=System.Object[]; clientApplicationPublisherIds=System.Object[]; clientApplicationsFromVerifiedPublisherOnly=False; certifiedClientApplicationsOnly=False; scopeSensitivityLabels=}}
includes@odata.context	https://graph.microsoft.com/beta/$metadata#policies/permissionGrantPolicies('microsoft-all-application-permissions')/includes
resourceScopeType	tenant

All chat resource-specific application permissions, for any client app

Property	Value
description	Includes all chat resoruce-specific application permissions, for all APIs, for any client application.
displayName	All chat resource-specific application permissions, for any client app
excludes	{}
excludes@odata.context	https://graph.microsoft.com/beta/$metadata#policies/permissionGrantPolicies('microsoft-all-application-permissions-for-chat')/excludes
id	microsoft-all-application-permissions-for-chat
includeAllPreApprovedApplications	False
includes	{@{id=013e8de3-5e79-4b0f-a440-8f7794086460; permissionClassification=all; permissionType=application; resourceApplication=any; permissions=System.Object[]; clientApplicationIds=System.Object[]; clientApplicationTenantIds=System.Object[]; clientApplicationPublisherIds=System.Object[]; clientApplicationsFromVerifiedPublisherOnly=False; certifiedClientApplicationsOnly=False; scopeSensitivityLabels=}}
includes@odata.context	https://graph.microsoft.com/beta/$metadata#policies/permissionGrantPolicies('microsoft-all-application-permissions-for-chat')/includes
resourceScopeType	chat

All team resource-specific application permissions, for any client app

Property	Value
description	(Deprecated) Includes all team resource-specific application permissions, for all APIs, for any client application.
displayName	All team resource-specific application permissions, for any client app
excludes	{}
excludes@odata.context	https://graph.microsoft.com/beta/$metadata#policies/permissionGrantPolicies('microsoft-all-application-permissions-for-team')/excludes
id	microsoft-all-application-permissions-for-team
includeAllPreApprovedApplications	False
includes	{@{id=1cf43e54-f240-4e19-8436-8d4fc4c97ab6; permissionClassification=all; permissionType=application; resourceApplication=any; permissions=System.Object[]; clientApplicationIds=System.Object[]; clientApplicationTenantIds=System.Object[]; clientApplicationPublisherIds=System.Object[]; clientApplicationsFromVerifiedPublisherOnly=False; certifiedClientApplicationsOnly=False; scopeSensitivityLabels=}}
includes@odata.context	https://graph.microsoft.com/beta/$metadata#policies/permissionGrantPolicies('microsoft-all-application-permissions-for-team')/includes
resourceScopeType	team

All application permissions, for client apps from verified publishers or this organization

Property	Value
description	Includes all application permissions (app roles), for all APIs, for client applications from verified publishers or which were registered in this organization.
displayName	All application permissions, for client apps from verified publishers or this organization
excludes	{}
excludes@odata.context	https://graph.microsoft.com/beta/$metadata#policies/permissionGrantPolicies('microsoft-all-application-permissions-verified')/excludes
id	microsoft-all-application-permissions-verified
includeAllPreApprovedApplications	False
includes	{@{id=c6b9e210-8bf5-446f-81bf-618f5a9cad09; permissionClassification=all; permissionType=application; resourceApplication=any; permissions=System.Object[]; clientApplicationIds=System.Object[]; clientApplicationTenantIds=System.Object[]; clientApplicationPublisherIds=System.Object[]; clientApplicationsFromVerifiedPublisherOnly=True; certifiedClientApplicationsOnly=False; scopeSensitivityLabels=}, @{id=13eda53f-4c56-4c8e-878c-6df6f1d331ee; permissionClassification=all; permissionType=application; resourceApplication=any; permissions=System.Object[]; clientApplicationIds=System.Object[]; clientApplicationTenantIds=System.Object[]; clientApplicationPublisherIds=System.Object[]; clientApplicationsFromVerifiedPublisherOnly=False; certifiedClientApplicationsOnly=False; scopeSensitivityLabels=}}
includes@odata.context	https://graph.microsoft.com/beta/$metadata#policies/permissionGrantPolicies('microsoft-all-application-permissions-verified')/includes
resourceScopeType	tenant

Application Admin Policy

Property	Value
description	Permissions consentable by Application Administrators.
displayName	Application Admin Policy
excludes	{@{id=c85b029f-4abf-47d8-ae61-d2a38299033a; permissionClassification=all; permissionType=application; resourceApplication=00000003-0000-0000-c000-000000000000; permissions=System.Object[]; clientApplicationIds=System.Object[]; clientApplicationTenantIds=System.Object[]; clientApplicationPublisherIds=System.Object[]; clientApplicationsFromVerifiedPublisherOnly=False; certifiedClientApplicationsOnly=False; scopeSensitivityLabels=}, @{id=2a1fbb36-9d9a-42d8-8804-de2aa45aca80; permissionClassification=all; permissionType=application; resourceApplication=00000002-0000-0000-c000-000000000000; permissions=System.Object[]; clientApplicationIds=System.Object[]; clientApplicationTenantIds=System.Object[]; clientApplicationPublisherIds=System.Object[]; clientApplicationsFromVerifiedPublisherOnly=False; certifiedClientApplicationsOnly=False; scopeSensitivityLabels=}}
excludes@odata.context	https://graph.microsoft.com/beta/$metadata#policies/permissionGrantPolicies('microsoft-application-admin')/excludes
id	microsoft-application-admin
includeAllPreApprovedApplications	False
includes	{@{id=811d2da7-443c-43da-96e7-28d285b234e9; permissionClassification=all; permissionType=application; resourceApplication=any; permissions=System.Object[]; clientApplicationIds=System.Object[]; clientApplicationTenantIds=System.Object[]; clientApplicationPublisherIds=System.Object[]; clientApplicationsFromVerifiedPublisherOnly=False; certifiedClientApplicationsOnly=False; scopeSensitivityLabels=}, @{id=60461179-740e-4d8b-9e00-1456a338c44b; permissionClassification=all; permissionType=delegated; resourceApplication=any; permissions=System.Object[]; clientApplicationIds=System.Object[]; clientApplicationTenantIds=System.Object[]; clientApplicationPublisherIds=System.Object[]; clientApplicationsFromVerifiedPublisherOnly=False; certifiedClientApplicationsOnly=False; scopeSensitivityLabels=}}
includes@odata.context	https://graph.microsoft.com/beta/$metadata#policies/permissionGrantPolicies('microsoft-application-admin')/includes
resourceScopeType	tenant

Company Admin Policy

Property	Value
description	Permissions consentable by Company Administrators.
displayName	Company Admin Policy
excludes	{}
excludes@odata.context	https://graph.microsoft.com/beta/$metadata#policies/permissionGrantPolicies('microsoft-company-admin')/excludes
id	microsoft-company-admin
includeAllPreApprovedApplications	False
includes	{@{id=1f06f3a1-42d3-4243-8fbc-5d0c30d4de4c; permissionClassification=all; permissionType=application; resourceApplication=any; permissions=System.Object[]; clientApplicationIds=System.Object[]; clientApplicationTenantIds=System.Object[]; clientApplicationPublisherIds=System.Object[]; clientApplicationsFromVerifiedPublisherOnly=False; certifiedClientApplicationsOnly=False; scopeSensitivityLabels=}, @{id=08619a19-ae6f-406c-b9a0-ea6af1f1558d; permissionClassification=all; permissionType=delegated; resourceApplication=any; permissions=System.Object[]; clientApplicationIds=System.Object[]; clientApplicationTenantIds=System.Object[]; clientApplicationPublisherIds=System.Object[]; clientApplicationsFromVerifiedPublisherOnly=False; certifiedClientApplicationsOnly=False; scopeSensitivityLabels=}}
includes@odata.context	https://graph.microsoft.com/beta/$metadata#policies/permissionGrantPolicies('microsoft-company-admin')/includes
resourceScopeType	tenant

Dynamically managed Microsoft policy for chat resource-specific consent

Property	Value
description	Includes dynamically managed permissions allowed for chat resource-specific consent.
displayName	Dynamically managed Microsoft policy for chat resource-specific consent
excludes	{}
excludes@odata.context	https://graph.microsoft.com/beta/$metadata#policies/permissionGrantPolicies('microsoft-dynamically-managed-permissions-for-chat')/excludes
id	microsoft-dynamically-managed-permissions-for-chat
includeAllPreApprovedApplications	False
includes	{@{id=feb0eaee-f52c-40bf-a932-4b6b86969877; permissionClassification=all; permissionType=application; resourceApplication=any; permissions=System.Object[]; clientApplicationIds=System.Object[]; clientApplicationTenantIds=System.Object[]; clientApplicationPublisherIds=System.Object[]; clientApplicationsFromVerifiedPublisherOnly=False; certifiedClientApplicationsOnly=False; scopeSensitivityLabels=}}
includes@odata.context	https://graph.microsoft.com/beta/$metadata#policies/permissionGrantPolicies('microsoft-dynamically-managed-permissions-for-chat')/includes
resourceScopeType	chat

Dynamically managed Microsoft policy for team resource-specific consent

Property	Value
description	Includes dynamically managed permissions allowed for team resource-specific consent.
displayName	Dynamically managed Microsoft policy for team resource-specific consent
excludes	{}
excludes@odata.context	https://graph.microsoft.com/beta/$metadata#policies/permissionGrantPolicies('microsoft-dynamically-managed-permissions-for-team')/excludes
id	microsoft-dynamically-managed-permissions-for-team
includeAllPreApprovedApplications	False
includes	{@{id=9cc16611-4f55-4405-ac32-3138bd0be516; permissionClassification=all; permissionType=application; resourceApplication=any; permissions=System.Object[]; clientApplicationIds=System.Object[]; clientApplicationTenantIds=System.Object[]; clientApplicationPublisherIds=System.Object[]; clientApplicationsFromVerifiedPublisherOnly=False; certifiedClientApplicationsOnly=False; scopeSensitivityLabels=}}
includes@odata.context	https://graph.microsoft.com/beta/$metadata#policies/permissionGrantPolicies('microsoft-dynamically-managed-permissions-for-team')/includes
resourceScopeType	team

Includes apps that have been pre-approved by permission grant pre-approval policy for chat

Property	Value
description	Includes apps that have been pre-approved by permission grant pre-approval policy for chat resource specific consent.
displayName	Includes apps that have been pre-approved by permission grant pre-approval policy for chat
excludes	{}
excludes@odata.context	https://graph.microsoft.com/beta/$metadata#policies/permissionGrantPolicies('microsoft-pre-approval-apps-for-chat')/excludes
id	microsoft-pre-approval-apps-for-chat
includeAllPreApprovedApplications	True
includes	{}
includes@odata.context	https://graph.microsoft.com/beta/$metadata#policies/permissionGrantPolicies('microsoft-pre-approval-apps-for-chat')/includes
resourceScopeType	chat

Includes apps that have been pre-approved by permission grant pre-approval policy for team

Property	Value
description	Includes apps that have been pre-approved by permission grant pre-approval policy for team resource specific consent.
displayName	Includes apps that have been pre-approved by permission grant pre-approval policy for team
excludes	{}
excludes@odata.context	https://graph.microsoft.com/beta/$metadata#policies/permissionGrantPolicies('microsoft-pre-approval-apps-for-team')/excludes
id	microsoft-pre-approval-apps-for-team
includeAllPreApprovedApplications	True
includes	{}
includes@odata.context	https://graph.microsoft.com/beta/$metadata#policies/permissionGrantPolicies('microsoft-pre-approval-apps-for-team')/includes
resourceScopeType	team

Default User Legacy Policy

Property	Value
description	All delegated permissions that do not require admin consent as defined by the developer are consentable by member type users by default.
displayName	Default User Legacy Policy
excludes	{}
excludes@odata.context	https://graph.microsoft.com/beta/$metadata#policies/permissionGrantPolicies('microsoft-user-default-legacy')/excludes
id	microsoft-user-default-legacy
includeAllPreApprovedApplications	False
includes	{@{id=e008dda9-5521-4e9b-a941-744b3aa7a610; permissionClassification=all; permissionType=delegatedUserConsentable; resourceApplication=any; permissions=System.Object[]; clientApplicationIds=System.Object[]; clientApplicationTenantIds=System.Object[]; clientApplicationPublisherIds=System.Object[]; clientApplicationsFromVerifiedPublisherOnly=False; certifiedClientApplicationsOnly=False; scopeSensitivityLabels=}}
includes@odata.context	https://graph.microsoft.com/beta/$metadata#policies/permissionGrantPolicies('microsoft-user-default-legacy')/includes
resourceScopeType	tenant

Default User Low Risk Policy

Property	Value
description	All low risk permissions are consentable by member type users by default.
displayName	Default User Low Risk Policy
excludes	{}
excludes@odata.context	https://graph.microsoft.com/beta/$metadata#policies/permissionGrantPolicies('microsoft-user-default-low')/excludes
id	microsoft-user-default-low
includeAllPreApprovedApplications	False
includes	{@{id=9c72ced4-50c7-4486-933e-6756d554b199; permissionClassification=low; permissionType=delegated; resourceApplication=any; permissions=System.Object[]; clientApplicationIds=System.Object[]; clientApplicationTenantIds=System.Object[]; clientApplicationPublisherIds=System.Object[]; clientApplicationsFromVerifiedPublisherOnly=False; certifiedClientApplicationsOnly=False; scopeSensitivityLabels=}, @{id=8ce99f96-730c-4ebd-8397-07ee65942b97; permissionClassification=low; permissionType=delegated; resourceApplication=any; permissions=System.Object[]; clientApplicationIds=System.Object[]; clientApplicationTenantIds=System.Object[]; clientApplicationPublisherIds=System.Object[]; clientApplicationsFromVerifiedPublisherOnly=True; certifiedClientApplicationsOnly=False; scopeSensitivityLabels=}}
includes@odata.context	https://graph.microsoft.com/beta/$metadata#policies/permissionGrantPolicies('microsoft-user-default-low')/includes
resourceScopeType	tenant

Microsoft User Default Recommended Policy

Property	Value
description	Permissions consentable based on Microsoft's current recommendations.
displayName	Microsoft User Default Recommended Policy
excludes	{}
excludes@odata.context	https://graph.microsoft.com/beta/$metadata#policies/permissionGrantPolicies('microsoft-user-default-recommended')/excludes
id	microsoft-user-default-recommended
includeAllPreApprovedApplications	False
includes	{@{id=939e5649-d754-4aa4-90df-8bfb027d11cc; permissionClassification=all; permissionType=delegated; resourceApplication=00000003-0000-0000-c000-000000000000; permissions=System.Object[]; clientApplicationIds=System.Object[]; clientApplicationTenantIds=System.Object[]; clientApplicationPublisherIds=System.Object[]; clientApplicationsFromVerifiedPublisherOnly=True; certifiedClientApplicationsOnly=False; scopeSensitivityLabels=}}
includes@odata.context	https://graph.microsoft.com/beta/$metadata#policies/permissionGrantPolicies('microsoft-user-default-recommended')/includes
resourceScopeType	tenant

Token Issuance Policy

Represents the policy to specify the characteristics of SAML tokens issued by Azure AD. You can use token-issuance policies to:

Set signing options
Set signing algorithm
Set SAML token version

TokenIssuancePolicy

Property	Value
definition	{{"TokenIssuancePolicy":{"Version":1,"SigningAlgorithm":"http://www.w3.org/2001/04/xmldsig-more#rsa-sha256","TokenResponseSigningPolicy":"ResponseOnly","SamlTokenVersion":"2.0","EmitSamlNameFormat":false}}}
deletedDateTime
displayName	TokenIssuancePolicy
id	fa2895d2-891e-4286-8837-e6924c06ce3a
isOrganizationDefault	False

TokenIssuancePolicy

Property	Value
definition	{{"TokenIssuancePolicy":{"Version":1,"SigningAlgorithm":"http://www.w3.org/2001/04/xmldsig-more#rsa-sha256","TokenResponseSigningPolicy":"ResponseAndToken","SamlTokenVersion":"2.0","EmitSamlNameFormat":false}}}
deletedDateTime
displayName	TokenIssuancePolicy
id	8788f1fa-ca5f-49f7-8e28-1ce724e771f7
isOrganizationDefault	False

TokenIssuancePolicy

Property	Value
definition	{{"TokenIssuancePolicy":{"Version":1,"SigningAlgorithm":"http://www.w3.org/2001/04/xmldsig-more#rsa-sha256","TokenResponseSigningPolicy":"ResponseAndToken","SamlTokenVersion":"2.0","EmitSamlNameFormat":false}}}
deletedDateTime
displayName	TokenIssuancePolicy
id	24263ac5-3814-4798-935e-923d95e5d9ad
isOrganizationDefault	False

TokenIssuancePolicy

Property	Value
definition	{{"TokenIssuancePolicy":{"Version":1,"SigningAlgorithm":"http://www.w3.org/2001/04/xmldsig-more#rsa-sha256","TokenResponseSigningPolicy":"ResponseAndToken","SamlTokenVersion":"2.0","EmitSamlNameFormat":false}}}
deletedDateTime
displayName	TokenIssuancePolicy
id	db45b70e-f5db-47c6-84f7-41c0569df5b8
isOrganizationDefault	False

TokenIssuancePolicy

Property	Value
definition	{{"TokenIssuancePolicy":{"Version":1,"SigningAlgorithm":"http://www.w3.org/2001/04/xmldsig-more#rsa-sha256","TokenResponseSigningPolicy":"ResponseAndToken","SamlTokenVersion":"2.0","EmitSamlNameFormat":false}}}
deletedDateTime
displayName	TokenIssuancePolicy
id	78cc2425-f990-4557-9c24-2995d20e96d7
isOrganizationDefault	False

Security Defaults Policy

Represents the Azure Active Directory security defaults policy. Security defaults contain preconfigured security settings that protect against common attacks.

Continuous Access Evaluation Policy

Continuous Access Evaluation (CAE) manages authentication sessions in real time. CAE allows customers to handle access to resources by supporting instant revocation events.

Authorization Policy

Represents a policy that can control Azure Active Directory authorization settings. It's a singleton that inherits from base policy type, and always exists for the tenant.

Feature rollout policy

Creating a feature rollout policy helps tenant administrators to pilot features of Azure AD with a specific group before enabling features for entire organization. This minimizes the impact and helps administrators to test and rollout authentication related features gradually.

Subscriptions

Contains information about Subscription/Online Services that a company is subscribed to.

accountId	accountName	appliesTo	capabilityStatus	consumedUnits	id	prepaidUnits	servicePlans	skuId	skuPartNumber	subscriptionIds
342619e0-4a9a-42e4-a66f-1ff9c85d08d6	carecentrix	User	Enabled	258	342619e0-4a9a-42e4-a66f-1ff9c85d08d6_c5928f49-12ba-48f7-ada3-0d743a3601d5		{@{servicePlanId=da792a53-cbc0-4184-a10d-e544dd34b3c1; servicePlanName=ONEDRIVE_BASIC; provisioningStatus=Success; appliesTo=User}, @{servicePlanId=2bdbaf8f-738f-4ac7-9234-3c3ee2ce7d0f; servicePlanName=VISIOONLINE; provisioningStatus=Success; appliesTo=User}, @{servicePlanId=113feb6c-3fe4-4440-bddc-54d774bf0318; servicePlanName=EXCHANGE_S_FOUNDATION; provisioningStatus=Success; appliesTo=Company}, @{servicePlanId=663a804f-1c30-4ff0-9915-9db84f0d1cea; servicePlanName=VISIO_CLIENT_SUBSCRIPTION; provisioningStatus=Success; appliesTo=User}}	c5928f49-12ba-48f7-ada3-0d743a3601d5	VISIOCLIENT	{dd26731c-0c59-4ade-99eb-bda926f3b607}
342619e0-4a9a-42e4-a66f-1ff9c85d08d6	carecentrix	User	Enabled	5	342619e0-4a9a-42e4-a66f-1ff9c85d08d6_1f2f344a-700d-42c9-9427-5cea1d5d7ba6		{@{servicePlanId=113feb6c-3fe4-4440-bddc-54d774bf0318; servicePlanName=EXCHANGE_S_FOUNDATION; provisioningStatus=Success; appliesTo=Company}, @{servicePlanId=acffdce6-c30f-4dc2-81c0-372e33c515ec; servicePlanName=Microsoft Stream; provisioningStatus=Success; appliesTo=User}}	1f2f344a-700d-42c9-9427-5cea1d5d7ba6	STREAM	{2fc73105-5d05-477e-8af0-38c28aa4c5d2}
342619e0-4a9a-42e4-a66f-1ff9c85d08d6	carecentrix	User	Enabled	0	342619e0-4a9a-42e4-a66f-1ff9c85d08d6_4a51bf65-409c-4a91-b845-1121b571cc9d		{@{servicePlanId=6ea4c1ef-c259-46df-bce2-943342cd3cb2; servicePlanName=DYN365_CDS_P2; provisioningStatus=Success; appliesTo=User}, @{servicePlanId=c5002c70-f725-4367-b409-f0eff4fee6c0; servicePlanName=FLOW_PER_USER; provisioningStatus=Success; appliesTo=User}, @{servicePlanId=113feb6c-3fe4-4440-bddc-54d774bf0318; servicePlanName=EXCHANGE_S_FOUNDATION; provisioningStatus=Success; appliesTo=Company}}	4a51bf65-409c-4a91-b845-1121b571cc9d	FLOW_PER_USER	{4a76c142-c03c-45cd-97ad-fa053c791970}
342619e0-4a9a-42e4-a66f-1ff9c85d08d6	carecentrix	User	Enabled	817	342619e0-4a9a-42e4-a66f-1ff9c85d08d6_f5b15d67-b99e-406b-90f1-308452f94de6		{@{servicePlanId=795f6fe0-cc4d-4773-b050-5dde4dc704c9; servicePlanName=UNIVERSAL_PRINT_01; provisioningStatus=Success; appliesTo=User}, @{servicePlanId=7bf960f6-2cd9-443a-8046-5dbff9558365; servicePlanName=WINDOWSUPDATEFORBUSINESS_DEPLOYMENTSERVICE; provisioningStatus=Success; appliesTo=User}, @{servicePlanId=3efbd4ed-8958-4824-8389-1321f8730af8; servicePlanName=MESH_AVATARS_ADDITIONAL_FOR_TEAMS; provisioningStatus=Success; appliesTo=User}, @{servicePlanId=dcf9d2f4-772e-4434-b757-77a453cfbc02; servicePlanName=MESH_AVATARS_FOR_TEAMS; provisioningStatus=Success; appliesTo=User}, @{servicePlanId=c4b8c31a-fb44-4c65-9837-a21f55fcabda; servicePlanName=MICROSOFT_LOOP; provisioningStatus=Success; appliesTo=User}, @{servicePlanId=0d0c0d31-fae7-41f2-b909-eaf4d7f26dba; servicePlanName=Bing_Chat_Enterprise; provisioningStatus=Success; appliesTo=User}, @{servicePlanId=a1ace008-72f3-4ea0-8dac-33b3a23a2472; servicePlanName=CLIPCHAMP; provisioningStatus=Success; appliesTo=User}, @{servicePlanId=9a6eeb79-0b4b-4bf0-9808-39d99a2cd5a3; servicePlanName=Windows_Autopatch; provisioningStatus=Success; appliesTo=User}}	f5b15d67-b99e-406b-90f1-308452f94de6	Microsoft_365_E3_Extra_Features	{cf7681ba-6338-472a-8731-004eee9c45bb}
342619e0-4a9a-42e4-a66f-1ff9c85d08d6	carecentrix	User	Enabled	7	342619e0-4a9a-42e4-a66f-1ff9c85d08d6_f8a1db68-be16-40ed-86d5-cb42ce701560		{@{servicePlanId=c948ea65-2053-4a5a-8a62-9eaaaf11b522; servicePlanName=PURVIEW_DISCOVERY; provisioningStatus=Success; appliesTo=User}, @{servicePlanId=113feb6c-3fe4-4440-bddc-54d774bf0318; servicePlanName=EXCHANGE_S_FOUNDATION; provisioningStatus=Success; appliesTo=Company}, @{servicePlanId=70d33638-9c74-4d01-bfd3-562de28bd4ba; servicePlanName=BI_AZURE_P2; provisioningStatus=Success; appliesTo=User}}	f8a1db68-be16-40ed-86d5-cb42ce701560	POWER_BI_PRO	{9d14b0cc-74fb-449b-8bba-841cb4f35811}
342619e0-4a9a-42e4-a66f-1ff9c85d08d6	carecentrix	User	Enabled	10	342619e0-4a9a-42e4-a66f-1ff9c85d08d6_639dec6b-bb19-468b-871c-c5c441c4b0cb		{@{servicePlanId=ff7b261f-d98b-415b-827c-42a3fdf015af; servicePlanName=WORKPLACE_ANALYTICS_INSIGHTS_BACKEND; provisioningStatus=Success; appliesTo=Company}, @{servicePlanId=b622badb-1b45-48d5-920f-4b27a2c0996c; servicePlanName=WORKPLACE_ANALYTICS_INSIGHTS_USER; provisioningStatus=Success; appliesTo=User}, @{servicePlanId=fe6c28b3-d468-44ea-bbd0-a10a5167435c; servicePlanName=COPILOT_STUDIO_IN_COPILOT_FOR_M365; provisioningStatus=Success; appliesTo=User}, @{servicePlanId=0aedf20c-091d-420b-aadf-30c042609612; servicePlanName=M365_COPILOT_SHAREPOINT; provisioningStatus=Success; appliesTo=User}, @{servicePlanId=82d30987-df9b-4486-b146-198b21d164c7; servicePlanName=GRAPH_CONNECTORS_COPILOT; provisioningStatus=Success; appliesTo=User}, @{servicePlanId=89f1c4c8-0878-40f7-804d-869c9128ab5d; servicePlanName=M365_COPILOT_CONNECTORS; provisioningStatus=Success; appliesTo=User}, @{servicePlanId=a62f8878-de10-42f3-b68f-6149a25ceb97; servicePlanName=M365_COPILOT_APPS; provisioningStatus=Success; appliesTo=User}, @{servicePlanId=b95945de-b3bd-46db-8437-f2beb6ea2347; servicePlanName=M365_COPILOT_TEAMS; provisioningStatus=Success; appliesTo=User}, @{servicePlanId=3f30311c-6b1e-48a4-ab79-725b469da960; servicePlanName=M365_COPILOT_BUSINESS_CHAT; provisioningStatus=Success; appliesTo=User}, @{servicePlanId=931e4a88-a67f-48b5-814f-16a5f1e6028d; servicePlanName=M365_COPILOT_INTELLIGENT_SEARCH; provisioningStatus=Success; appliesTo=User}}	639dec6b-bb19-468b-871c-c5c441c4b0cb	Microsoft_365_Copilot	{87ba7873-96db-458a-967f-86b7c622aef3}
342619e0-4a9a-42e4-a66f-1ff9c85d08d6	carecentrix	User	Enabled	21	342619e0-4a9a-42e4-a66f-1ff9c85d08d6_8f0c5670-4e56-4892-b06d-91c085d7004f		{@{servicePlanId=113feb6c-3fe4-4440-bddc-54d774bf0318; servicePlanName=EXCHANGE_S_FOUNDATION; provisioningStatus=Success; appliesTo=Company}, @{servicePlanId=0bfc98ed-1dbc-4a97-b246-701754e48b17; servicePlanName=SPZA; provisioningStatus=Success; appliesTo=User}}	8f0c5670-4e56-4892-b06d-91c085d7004f	SPZA_IW	{3ee5edab-8704-4b74-9678-4be27aaed077}
342619e0-4a9a-42e4-a66f-1ff9c85d08d6	carecentrix	Company	Enabled	0	342619e0-4a9a-42e4-a66f-1ff9c85d08d6_6470687e-a428-4b7a-bef2-8a291ad947c9		{@{servicePlanId=113feb6c-3fe4-4440-bddc-54d774bf0318; servicePlanName=EXCHANGE_S_FOUNDATION; provisioningStatus=Success; appliesTo=Company}, @{servicePlanId=a420f25f-a7b3-4ff5-a9d0-5d58f73b537d; servicePlanName=WINDOWS_STORE; provisioningStatus=Success; appliesTo=Company}}	6470687e-a428-4b7a-bef2-8a291ad947c9	WINDOWS_STORE	{78a20780-c981-4c21-946a-5031c1611f92}
342619e0-4a9a-42e4-a66f-1ff9c85d08d6	carecentrix	User	Enabled	1930	342619e0-4a9a-42e4-a66f-1ff9c85d08d6_6fd2c87f-b296-42f0-b197-1e91e994b900		{@{servicePlanId=1fe6227d-3e01-46d0-9510-0acad4ff6e94; servicePlanName=PLACES_CORE; provisioningStatus=Success; appliesTo=User}, @{servicePlanId=a6520331-d7d4-4276-95f5-15c0933bc757; servicePlanName=GRAPH_CONNECTORS_SEARCH_INDEX; provisioningStatus=Success; appliesTo=User}, @{servicePlanId=a1ace008-72f3-4ea0-8dac-33b3a23a2472; servicePlanName=CLIPCHAMP; provisioningStatus=Success; appliesTo=User}, @{servicePlanId=0d0c0d31-fae7-41f2-b909-eaf4d7f26dba; servicePlanName=Bing_Chat_Enterprise; provisioningStatus=Success; appliesTo=User}, @{servicePlanId=f0ff6ac6-297d-49cd-be34-6dfef97f0c28; servicePlanName=MESH_IMMERSIVE_FOR_TEAMS; provisioningStatus=Success; appliesTo=User}, @{servicePlanId=3efbd4ed-8958-4824-8389-1321f8730af8; servicePlanName=MESH_AVATARS_ADDITIONAL_FOR_TEAMS; provisioningStatus=Success; appliesTo=User}, @{servicePlanId=dcf9d2f4-772e-4434-b757-77a453cfbc02; servicePlanName=MESH_AVATARS_FOR_TEAMS; provisioningStatus=Success; appliesTo=User}, @{servicePlanId=6f23d6a9-adbf-481c-8538-b4c095654487; servicePlanName=M365_LIGHTHOUSE_CUSTOMER_PLAN1; provisioningStatus=Success; appliesTo=Company}, @{servicePlanId=a82fbf69-b4d7-49f4-83a6-915b2cf354f4; servicePlanName=VIVAENGAGE_CORE; provisioningStatus=Success; appliesTo=User}, @{servicePlanId=b76fb638-6ba6-402a-b9f9-83d28acb3d86; servicePlanName=VIVA_LEARNING_SEEDED; provisioningStatus=Success; appliesTo=User}, @{servicePlanId=db4d623d-b514-490b-b7ef-8885eee514de; servicePlanName=Nucleus; provisioningStatus=Success; appliesTo=Company}, @{servicePlanId=2b815d45-56e4-4e3a-b65c-66cb9175b560; servicePlanName=ContentExplorer_Standard; provisioningStatus=Success; appliesTo=Company}, @{servicePlanId=041fe683-03e4-45b6-b1af-c0cdc516daee; servicePlanName=POWER_VIRTUAL_AGENTS_O365_P2; provisioningStatus=Success; appliesTo=User}, @{servicePlanId=95b76021-6a53-4741-ab8b-1d1f3d66a95a; servicePlanName=CDS_O365_P2; provisioningStatus=Success; appliesTo=User}, @{servicePlanId=31b4e2fc-4cd6-4e7d-9c1b-41407303bd66; servicePlanName=PROJECT_O365_P2; provisioningStatus=Success; appliesTo=User}, @{servicePlanId=4ff01e01-1ba7-4d71-8cf8-ce96c3bbcf14; servicePlanName=DYN365_CDS_O365_P2; provisioningStatus=Success; appliesTo=User}, @{servicePlanId=199a5c09-e0ca-4e37-8f7c-b05d533e1ea2; servicePlanName=MICROSOFTBOOKINGS; provisioningStatus=Success; appliesTo=User}, @{servicePlanId=aebd3021-9f8f-4bf8-bbe3-0ed2f4f047a1; servicePlanName=KAIZALA_O365_P3; provisioningStatus=Success; appliesTo=User}, @{servicePlanId=94065c59-bc8e-4e8b-89e5-5138d471eaff; servicePlanName=MICROSOFT_SEARCH; provisioningStatus=Success; appliesTo=Company}, @{servicePlanId=94a54592-cd8b-425e-87c6-97868b000b91; servicePlanName=WHITEBOARD_PLAN2; provisioningStatus=Success; appliesTo=User}, @{servicePlanId=5136a095-5cf0-4aff-bec3-e84448b38ea5; servicePlanName=MIP_S_CLP1; provisioningStatus=Success; appliesTo=User}, @{servicePlanId=33c4f319-9bdd-48d6-9c4d-410b750a4a5a; servicePlanName=MYANALYTICS_P2; provisioningStatus=Success; appliesTo=User}, @{servicePlanId=c87f142c-d1e9-4363-8630-aaea9c4d9ae5; servicePlanName=BPOS_S_TODO_2; provisioningStatus=Success; appliesTo=User}, @{servicePlanId=2789c901-c14e-48ab-a76a-be334d9d793a; servicePlanName=FORMS_PLAN_E3; provisioningStatus=Success; appliesTo=User}, @{servicePlanId=9e700747-8b1d-45e5-ab8d-ef187ceec156; servicePlanName=STREAM_O365_E3; provisioningStatus=Success; appliesTo=User}, @{servicePlanId=8c7d2df8-86f0-4902-b2ed-a0458298f3b3; servicePlanName=Deskless; provisioningStatus=Success; appliesTo=User}, @{servicePlanId=76846ad7-7776-4c40-a281-a386362dd1b9; servicePlanName=FLOW_O365_P2; provisioningStatus=Success; appliesTo=User}, @{servicePlanId=c68f8d98-5534-41c8-bf36-22fa496fa792; servicePlanName=POWERAPPS_O365_P2; provisioningStatus=Success; appliesTo=User}, @{servicePlanId=57ff2da0-773e-42df-b2af-ffb7a2317929; servicePlanName=TEAMS1; provisioningStatus=Success; appliesTo=User}, @{servicePlanId=b737dad2-2f6c-4c65-90e3-ca563267e8b9; servicePlanName=PROJECTWORKMANAGEMENT; provisioningStatus=Success; appliesTo=User}, @{servicePlanId=a23b959c-7ce8-4e57-9140-b90eb88a9e97; servicePlanName=SWAY; provisioningStatus=Success; appliesTo=User}, @{servicePlanId=882e1d05-acd1-4ccb-8708-6ee03664b117; servicePlanName=INTUNE_O365; provisioningStatus=PendingActivation; appliesTo=Company}, @{servicePlanId=7547a3fe-08ee-4ccb-b430-5077c5041653; servicePlanName=YAMMER_ENTERPRISE; provisioningStatus=Success; appliesTo=User}, @{servicePlanId=bea4c11e-220a-4e6d-8eb8-8ea15d019f90; servicePlanName=RMS_S_ENTERPRISE; provisioningStatus=Success; appliesTo=User}, @{servicePlanId=43de0ff5-c92c-492b-9116-175376d08c38; servicePlanName=OFFICESUBSCRIPTION; provisioningStatus=Success; appliesTo=User}, @{servicePlanId=0feaeb32-d00e-4d66-bd5a-43b5b83db82c; servicePlanName=MCOSTANDARD; provisioningStatus=Success; appliesTo=User}, @{servicePlanId=e95bec33-7c88-4a70-8e19-b10bd9d0c014; servicePlanName=SHAREPOINTWAC; provisioningStatus=Success; appliesTo=User}, @{servicePlanId=5dbe027f-2339-4123-9542-606e4d348a72; servicePlanName=SHAREPOINTENTERPRISE; provisioningStatus=Success; appliesTo=User}, @{servicePlanId=efb87545-963c-4e0d-99df-69c6916d9eb0; servicePlanName=EXCHANGE_S_ENTERPRISE; provisioningStatus=Success; appliesTo=User}}	6fd2c87f-b296-42f0-b197-1e91e994b900	ENTERPRISEPACK	{80a66e61-a898-4ab4-bf37-ce7c34fc3c27}
342619e0-4a9a-42e4-a66f-1ff9c85d08d6	carecentrix	User	Enabled	735	342619e0-4a9a-42e4-a66f-1ff9c85d08d6_f30db892-07e9-47e9-837c-80727f46fd3d		{@{servicePlanId=113feb6c-3fe4-4440-bddc-54d774bf0318; servicePlanName=EXCHANGE_S_FOUNDATION; provisioningStatus=Success; appliesTo=Company}, @{servicePlanId=17ab22cd-a0b3-4536-910a-cb6eb12696c0; servicePlanName=DYN365_CDS_VIRAL; provisioningStatus=Success; appliesTo=User}, @{servicePlanId=50e68c76-46c6-4674-81f9-75456511b170; servicePlanName=FLOW_P2_VIRAL; provisioningStatus=Success; appliesTo=User}}	f30db892-07e9-47e9-837c-80727f46fd3d	FLOW_FREE	{c56b7133-bfe7-4002-89e2-7739e29e2df8}
342619e0-4a9a-42e4-a66f-1ff9c85d08d6	carecentrix	User	Enabled	1908	342619e0-4a9a-42e4-a66f-1ff9c85d08d6_6a0f6da5-0b87-4190-a6ae-9bb5a2b9546a		{@{servicePlanId=9a6eeb79-0b4b-4bf0-9808-39d99a2cd5a3; servicePlanName=Windows_Autopatch; provisioningStatus=Success; appliesTo=User}, @{servicePlanId=2d589a15-b171-4e61-9b5f-31d15eeb2872; servicePlanName=POWERAUTOMATE_DESKTOP_FOR_WIN; provisioningStatus=Success; appliesTo=User}, @{servicePlanId=59231cdf-b40d-4534-a93e-14d0cd31d27e; servicePlanName=DATAVERSE_FOR_POWERAUTOMATE_DESKTOP; provisioningStatus=Success; appliesTo=User}, @{servicePlanId=7bf960f6-2cd9-443a-8046-5dbff9558365; servicePlanName=WINDOWSUPDATEFORBUSINESS_DEPLOYMENTSERVICE; provisioningStatus=Success; appliesTo=User}, @{servicePlanId=795f6fe0-cc4d-4773-b050-5dde4dc704c9; servicePlanName=UNIVERSAL_PRINT_01; provisioningStatus=Success; appliesTo=User}, @{servicePlanId=113feb6c-3fe4-4440-bddc-54d774bf0318; servicePlanName=EXCHANGE_S_FOUNDATION; provisioningStatus=Success; appliesTo=Company}, @{servicePlanId=e7c91390-7625-45be-94e0-e16907e03118; servicePlanName=Virtualization Rights for Windows 10 (E3/E5+VDA); provisioningStatus=Success; appliesTo=User}}	6a0f6da5-0b87-4190-a6ae-9bb5a2b9546a	Win10_VDA_E3	{4b8de583-e51a-446d-a594-ed9259890355}
342619e0-4a9a-42e4-a66f-1ff9c85d08d6	carecentrix	User	Enabled	2	342619e0-4a9a-42e4-a66f-1ff9c85d08d6_606b54a9-78d8-4298-ad8b-df6ef4481c80		{@{servicePlanId=5d798708-6473-48ad-9776-3acc301c40af; servicePlanName=FLOW_CCI_BOTS; provisioningStatus=Success; appliesTo=User}, @{servicePlanId=ce312d15-8fdf-44c0-9974-a25a177125ee; servicePlanName=CCIBOTS_PRIVPREV_VIRAL; provisioningStatus=Success; appliesTo=User}, @{servicePlanId=cf7034ed-348f-42eb-8bbd-dddeea43ee81; servicePlanName=DYN365_CDS_CCI_BOTS; provisioningStatus=Success; appliesTo=User}}	606b54a9-78d8-4298-ad8b-df6ef4481c80	CCIBOTS_PRIVPREV_VIRAL	{36f07211-a50f-48c2-9182-21a1692c898b}
342619e0-4a9a-42e4-a66f-1ff9c85d08d6	carecentrix	User	Enabled	0	342619e0-4a9a-42e4-a66f-1ff9c85d08d6_dcb1a3ae-b33f-4487-846a-a640262fadf4		{@{servicePlanId=113feb6c-3fe4-4440-bddc-54d774bf0318; servicePlanName=EXCHANGE_S_FOUNDATION; provisioningStatus=Success; appliesTo=Company}, @{servicePlanId=d20bfa21-e9ae-43fc-93c2-20783f0840c3; servicePlanName=FLOW_P2_VIRAL_REAL; provisioningStatus=Success; appliesTo=User}, @{servicePlanId=17ab22cd-a0b3-4536-910a-cb6eb12696c0; servicePlanName=DYN365_CDS_VIRAL; provisioningStatus=Success; appliesTo=User}, @{servicePlanId=d5368ca3-357e-4acb-9c21-8495fb025d1f; servicePlanName=POWERAPPS_P2_VIRAL; provisioningStatus=Success; appliesTo=User}, @{servicePlanId=50e68c76-46c6-4674-81f9-75456511b170; servicePlanName=FLOW_P2_VIRAL; provisioningStatus=Success; appliesTo=User}}	dcb1a3ae-b33f-4487-846a-a640262fadf4	POWERAPPS_VIRAL	{1ba14958-1b38-4616-8a0c-06eb6a57bb9d}
342619e0-4a9a-42e4-a66f-1ff9c85d08d6	carecentrix	User	Enabled	64	342619e0-4a9a-42e4-a66f-1ff9c85d08d6_a403ebcc-fae0-4ca2-8c8c-7a907fd6c235		{@{servicePlanId=c948ea65-2053-4a5a-8a62-9eaaaf11b522; servicePlanName=PURVIEW_DISCOVERY; provisioningStatus=Success; appliesTo=User}, @{servicePlanId=113feb6c-3fe4-4440-bddc-54d774bf0318; servicePlanName=EXCHANGE_S_FOUNDATION; provisioningStatus=Success; appliesTo=Company}, @{servicePlanId=2049e525-b859-401b-b2a0-e0a31c4b1fe4; servicePlanName=BI_AZURE_P0; provisioningStatus=Success; appliesTo=User}}	a403ebcc-fae0-4ca2-8c8c-7a907fd6c235	POWER_BI_STANDARD	{f90c3707-0fb1-4ad4-9704-5edb522290e2}
342619e0-4a9a-42e4-a66f-1ff9c85d08d6	carecentrix	User	Enabled	1889	342619e0-4a9a-42e4-a66f-1ff9c85d08d6_47794cd0-f0e5-45c5-9033-2eb6b5fc84e0		{@{servicePlanId=505e180f-f7e0-4b65-91d4-00d670bbd18c; servicePlanName=MCOPSTNC; provisioningStatus=Success; appliesTo=User}}	47794cd0-f0e5-45c5-9033-2eb6b5fc84e0	MCOPSTNC	{f6a6b8d8-2f0b-49ab-9c0c-ee5d4f312586}
342619e0-4a9a-42e4-a66f-1ff9c85d08d6	carecentrix	User	Enabled	10	342619e0-4a9a-42e4-a66f-1ff9c85d08d6_ae2343d1-0999-43f6-ae18-d816516f6e78		{@{servicePlanId=d777d602-8fec-430c-906e-990861c55287; servicePlanName=MCOSMS3; provisioningStatus=Success; appliesTo=User}, @{servicePlanId=4828c8ec-dc2e-4779-b502-87ac9ce28ab7; servicePlanName=MCOEV; provisioningStatus=Success; appliesTo=User}, @{servicePlanId=4ed3ff63-69d7-4fb7-b984-5aec7f605ca8; servicePlanName=MCOPSTN1; provisioningStatus=Success; appliesTo=User}}	ae2343d1-0999-43f6-ae18-d816516f6e78	MCOTEAMS_ESSENTIALS	{616556a8-5943-4a22-a6c5-07791ef4001d}
342619e0-4a9a-42e4-a66f-1ff9c85d08d6	carecentrix	User	Enabled	0	342619e0-4a9a-42e4-a66f-1ff9c85d08d6_c1d032e0-5619-4761-9b5c-75b6831e1711		{@{servicePlanId=c948ea65-2053-4a5a-8a62-9eaaaf11b522; servicePlanName=PURVIEW_DISCOVERY; provisioningStatus=Success; appliesTo=User}, @{servicePlanId=70d33638-9c74-4d01-bfd3-562de28bd4ba; servicePlanName=BI_AZURE_P2; provisioningStatus=Success; appliesTo=User}, @{servicePlanId=113feb6c-3fe4-4440-bddc-54d774bf0318; servicePlanName=EXCHANGE_S_FOUNDATION; provisioningStatus=Success; appliesTo=Company}, @{servicePlanId=0bf3c642-7bb5-4ccc-884e-59d09df0266c; servicePlanName=BI_AZURE_P3; provisioningStatus=Success; appliesTo=User}}	c1d032e0-5619-4761-9b5c-75b6831e1711	PBI_PREMIUM_PER_USER	{98b98472-6656-45c1-a4c1-0573c6a87313}
342619e0-4a9a-42e4-a66f-1ff9c85d08d6	carecentrix	User	Enabled	21	342619e0-4a9a-42e4-a66f-1ff9c85d08d6_06ebc4ee-1bb5-47dd-8120-11324bc54e06		{@{servicePlanId=1fe6227d-3e01-46d0-9510-0acad4ff6e94; servicePlanName=PLACES_CORE; provisioningStatus=Success; appliesTo=User}, @{servicePlanId=a312bdeb-1e21-40d0-84b1-0e73f128144f; servicePlanName=COMMON_DEFENDER_PLATFORM_FOR_OFFICE; provisioningStatus=Success; appliesTo=Company}, @{servicePlanId=f0ff6ac6-297d-49cd-be34-6dfef97f0c28; servicePlanName=MESH_IMMERSIVE_FOR_TEAMS; provisioningStatus=Success; appliesTo=User}, @{servicePlanId=c948ea65-2053-4a5a-8a62-9eaaaf11b522; servicePlanName=PURVIEW_DISCOVERY; provisioningStatus=Success; appliesTo=User}, @{servicePlanId=99cd49a9-0e54-4e07-aea1-d8d9f5f704f5; servicePlanName=Defender_for_Iot_Enterprise; provisioningStatus=Success; appliesTo=User}, @{servicePlanId=3ec18638-bd4c-4d3b-8905-479ed636b83e; servicePlanName=CustomerLockboxA_Enterprise; provisioningStatus=Success; appliesTo=User}, @{servicePlanId=3efbd4ed-8958-4824-8389-1321f8730af8; servicePlanName=MESH_AVATARS_ADDITIONAL_FOR_TEAMS; provisioningStatus=Success; appliesTo=User}, @{servicePlanId=dcf9d2f4-772e-4434-b757-77a453cfbc02; servicePlanName=MESH_AVATARS_FOR_TEAMS; provisioningStatus=Success; appliesTo=User}, @{servicePlanId=c4b8c31a-fb44-4c65-9837-a21f55fcabda; servicePlanName=MICROSOFT_LOOP; provisioningStatus=Success; appliesTo=User}, @{servicePlanId=0d0c0d31-fae7-41f2-b909-eaf4d7f26dba; servicePlanName=Bing_Chat_Enterprise; provisioningStatus=Success; appliesTo=User}, @{servicePlanId=a1ace008-72f3-4ea0-8dac-33b3a23a2472; servicePlanName=CLIPCHAMP; provisioningStatus=Success; appliesTo=User}, @{servicePlanId=f6de4823-28fa-440b-b886-4783fa86ddba; servicePlanName=M365_AUDIT_PLATFORM; provisioningStatus=Success; appliesTo=User}, @{servicePlanId=a82fbf69-b4d7-49f4-83a6-915b2cf354f4; servicePlanName=VIVAENGAGE_CORE; provisioningStatus=Success; appliesTo=User}, @{servicePlanId=9a6eeb79-0b4b-4bf0-9808-39d99a2cd5a3; servicePlanName=Windows_Autopatch; provisioningStatus=Success; appliesTo=User}, @{servicePlanId=6f23d6a9-adbf-481c-8538-b4c095654487; servicePlanName=M365_LIGHTHOUSE_CUSTOMER_PLAN1; provisioningStatus=Success; appliesTo=Company}, @{servicePlanId=b76fb638-6ba6-402a-b9f9-83d28acb3d86; servicePlanName=VIVA_LEARNING_SEEDED; provisioningStatus=Success; appliesTo=User}, @{servicePlanId=db4d623d-b514-490b-b7ef-8885eee514de; servicePlanName=Nucleus; provisioningStatus=Success; appliesTo=Company}, @{servicePlanId=2b815d45-56e4-4e3a-b65c-66cb9175b560; servicePlanName=ContentExplorer_Standard; provisioningStatus=Success; appliesTo=Company}, @{servicePlanId=7bf960f6-2cd9-443a-8046-5dbff9558365; servicePlanName=WINDOWSUPDATEFORBUSINESS_DEPLOYMENTSERVICE; provisioningStatus=Success; appliesTo=User}, @{servicePlanId=795f6fe0-cc4d-4773-b050-5dde4dc704c9; servicePlanName=UNIVERSAL_PRINT_01; provisioningStatus=Success; appliesTo=User}, @{servicePlanId=cd31b152-6326-4d1b-ae1b-997b625182e6; servicePlanName=MIP_S_Exchange; provisioningStatus=Success; appliesTo=User}, @{servicePlanId=a413a9ff-720c-4822-98ef-2f37c2a21f4c; servicePlanName=MICROSOFT_COMMUNICATION_COMPLIANCE; provisioningStatus=Success; appliesTo=User}, @{servicePlanId=a6520331-d7d4-4276-95f5-15c0933bc757; servicePlanName=GRAPH_CONNECTORS_SEARCH_INDEX; provisioningStatus=Success; appliesTo=User}, @{servicePlanId=d9fa6af4-e046-4c89-9226-729a0786685d; servicePlanName=Content_Explorer; provisioningStatus=Success; appliesTo=Company}, @{servicePlanId=ded3d325-1bdc-453e-8432-5bac26d7a014; servicePlanName=POWER_VIRTUAL_AGENTS_O365_P3; provisioningStatus=Success; appliesTo=User}, @{servicePlanId=afa73018-811e-46e9-988f-f75d2b1b8430; servicePlanName=CDS_O365_P3; provisioningStatus=Success; appliesTo=User}, @{servicePlanId=b21a6b06-1988-436e-a07b-51ec6d9f52ad; servicePlanName=PROJECT_O365_P3; provisioningStatus=Success; appliesTo=User}, @{servicePlanId=64bfac92-2b17-4482-b5e5-a0304429de3e; servicePlanName=MICROSOFTENDPOINTDLP; provisioningStatus=Success; appliesTo=User}, @{servicePlanId=d587c7a3-bda9-4f99-8776-9bcf59c84f75; servicePlanName=INSIDER_RISK; provisioningStatus=Success; appliesTo=User}, @{servicePlanId=531ee2f8-b1cb-453b-9c21-d2180d014ca5; servicePlanName=EXCEL_PREMIUM; provisioningStatus=Success; appliesTo=User}, @{servicePlanId=bf28f719-7844-4079-9c78-c1307898e192; servicePlanName=MTP; provisioningStatus=Success; appliesTo=User}, @{servicePlanId=28b0fa46-c39a-4188-89e2-58e979a6b014; servicePlanName=DYN365_CDS_O365_P3; provisioningStatus=Success; appliesTo=User}, @{servicePlanId=199a5c09-e0ca-4e37-8f7c-b05d533e1ea2; servicePlanName=MICROSOFTBOOKINGS; provisioningStatus=Success; appliesTo=User}, @{servicePlanId=65cc641f-cccd-4643-97e0-a17e3045e541; servicePlanName=RECORDS_MANAGEMENT; provisioningStatus=Success; appliesTo=User}, @{servicePlanId=d2d51368-76c9-4317-ada2-a12c004c432f; servicePlanName=ML_CLASSIFICATION; provisioningStatus=Success; appliesTo=User}, @{servicePlanId=9d0c4ee5-e4a1-4625-ab39-d82b619b1a34; servicePlanName=INSIDER_RISK_MANAGEMENT; provisioningStatus=Success; appliesTo=User}, @{servicePlanId=e26c2fcc-ab91-4a61-b35c-03cdc8dddf66; servicePlanName=INFO_GOVERNANCE; provisioningStatus=Success; appliesTo=User}, @{servicePlanId=46129a58-a698-46f0-aa5b-17f6586297d9; servicePlanName=DATA_INVESTIGATIONS; provisioningStatus=Success; appliesTo=User}, @{servicePlanId=6db1f1db-2b46-403f-be40-e39395f08dbb; servicePlanName=CUSTOMER_KEY; provisioningStatus=Success; appliesTo=User}, @{servicePlanId=6dc145d6-95dd-4191-b9c3-185575ee6f6b; servicePlanName=COMMUNICATIONS_DLP; provisioningStatus=Success; appliesTo=User}, @{servicePlanId=41fcdd7d-4733-4863-9cf4-c65b83ce2df4; servicePlanName=COMMUNICATIONS_COMPLIANCE; provisioningStatus=Success; appliesTo=User}, @{servicePlanId=bf6f5520-59e3-4f82-974b-7dbbc4fd27c7; servicePlanName=SAFEDOCS; provisioningStatus=Success; appliesTo=User}, @{servicePlanId=2f442157-a11c-46b9-ae5b-6e39ff4e5849; servicePlanName=M365_ADVANCED_AUDITING; provisioningStatus=Success; appliesTo=User}, @{servicePlanId=c4801e8a-cb58-4c35-aca6-f2dcc106f287; servicePlanName=INFORMATION_BARRIERS; provisioningStatus=Success; appliesTo=User}, @{servicePlanId=0898bdbb-73b0-471a-81e5-20f1fe4dd66e; servicePlanName=KAIZALA_STANDALONE; provisioningStatus=Success; appliesTo=User}, @{servicePlanId=94065c59-bc8e-4e8b-89e5-5138d471eaff; servicePlanName=MICROSOFT_SEARCH; provisioningStatus=Success; appliesTo=Company}, @{servicePlanId=617b097b-4b93-4ede-83de-5f075bb5fb2f; servicePlanName=PREMIUM_ENCRYPTION; provisioningStatus=Success; appliesTo=User}, @{servicePlanId=4a51bca5-1eff-43f5-878c-177680f191af; servicePlanName=WHITEBOARD_PLAN3; provisioningStatus=Success; appliesTo=User}, @{servicePlanId=efb0351d-3b08-4503-993d-383af8de41e3; servicePlanName=MIP_S_CLP2; provisioningStatus=Success; appliesTo=User}, @{servicePlanId=5136a095-5cf0-4aff-bec3-e84448b38ea5; servicePlanName=MIP_S_CLP1; provisioningStatus=Success; appliesTo=User}, @{servicePlanId=33c4f319-9bdd-48d6-9c4d-410b750a4a5a; servicePlanName=MYANALYTICS_P2; provisioningStatus=Success; appliesTo=User}, @{servicePlanId=b1188c4c-1b36-4018-b48b-ee07604f6feb; servicePlanName=PAM_ENTERPRISE; provisioningStatus=Success; appliesTo=User}, @{servicePlanId=14ab5db5-e6c4-4b20-b4bc-13e36fd2227f; servicePlanName=ATA; provisioningStatus=Success; appliesTo=User}, @{servicePlanId=3fb82609-8c27-4f7b-bd51-30634711ee67; servicePlanName=BPOS_S_TODO_3; provisioningStatus=Success; appliesTo=User}, @{servicePlanId=07699545-9485-468e-95b6-2fca3738be01; servicePlanName=FLOW_O365_P3; provisioningStatus=Success; appliesTo=User}, @{servicePlanId=9c0dab89-a30c-4117-86e7-97bda240acd2; servicePlanName=POWERAPPS_O365_P3; provisioningStatus=Success; appliesTo=User}, @{servicePlanId=e212cbc7-0961-4c40-9825-01117710dcb1; servicePlanName=FORMS_PLAN_E5; provisioningStatus=Success; appliesTo=User}, @{servicePlanId=2e2ddb96-6af9-4b1d-a3f0-d6ecfd22edb2; servicePlanName=ADALLOM_S_STANDALONE; provisioningStatus=Success; appliesTo=User}, @{servicePlanId=6c6042f5-6f01-4d67-b8c1-eb99d36eed3e; servicePlanName=STREAM_O365_E5; provisioningStatus=Success; appliesTo=User}, @{servicePlanId=8c7d2df8-86f0-4902-b2ed-a0458298f3b3; servicePlanName=Deskless; provisioningStatus=Success; appliesTo=User}, @{servicePlanId=8e0c0a52-6a6c-4d40-8370-dd62790dcd70; servicePlanName=THREAT_INTELLIGENCE; provisioningStatus=Success; appliesTo=User}, @{servicePlanId=57ff2da0-773e-42df-b2af-ffb7a2317929; servicePlanName=TEAMS1; provisioningStatus=Success; appliesTo=User}, @{servicePlanId=871d91ec-ec1a-452b-a83f-bd76c7d770ef; servicePlanName=WINDEFATP; provisioningStatus=Success; appliesTo=User}, @{servicePlanId=21b439ba-a0ca-424f-a6cc-52f954a5b111; servicePlanName=WIN10_PRO_ENT_SUB; provisioningStatus=Success; appliesTo=User}, @{servicePlanId=5689bec4-755d-4753-8b61-40975025187c; servicePlanName=RMS_S_PREMIUM2; provisioningStatus=Success; appliesTo=User}, @{servicePlanId=eec0eb4f-6444-4f95-aba0-50c24d67f998; servicePlanName=AAD_PREMIUM_P2; provisioningStatus=Success; appliesTo=User}, @{servicePlanId=6c57d4b6-3b23-47a5-9bc9-69f17b4947b3; servicePlanName=RMS_S_PREMIUM; provisioningStatus=Success; appliesTo=User}, @{servicePlanId=bea4c11e-220a-4e6d-8eb8-8ea15d019f90; servicePlanName=RMS_S_ENTERPRISE; provisioningStatus=Success; appliesTo=User}, @{servicePlanId=8a256a2b-b617-496d-b51b-e76466e88db0; servicePlanName=MFA_PREMIUM; provisioningStatus=Success; appliesTo=User}, @{servicePlanId=c1ec4a95-1f05-45b3-a911-aa3fa01094f5; servicePlanName=INTUNE_A; provisioningStatus=Success; appliesTo=User}, @{servicePlanId=41781fb2-bc02-4b7c-bd55-b576c07bb09d; servicePlanName=AAD_PREMIUM; provisioningStatus=Success; appliesTo=User}, @{servicePlanId=7547a3fe-08ee-4ccb-b430-5077c5041653; servicePlanName=YAMMER_ENTERPRISE; provisioningStatus=Success; appliesTo=User}, @{servicePlanId=a23b959c-7ce8-4e57-9140-b90eb88a9e97; servicePlanName=SWAY; provisioningStatus=Success; appliesTo=User}, @{servicePlanId=e95bec33-7c88-4a70-8e19-b10bd9d0c014; servicePlanName=SHAREPOINTWAC; provisioningStatus=Success; appliesTo=User}, @{servicePlanId=5dbe027f-2339-4123-9542-606e4d348a72; servicePlanName=SHAREPOINTENTERPRISE; provisioningStatus=Success; appliesTo=User}, @{servicePlanId=b737dad2-2f6c-4c65-90e3-ca563267e8b9; servicePlanName=PROJECTWORKMANAGEMENT; provisioningStatus=Success; appliesTo=User}, @{servicePlanId=43de0ff5-c92c-492b-9116-175376d08c38; servicePlanName=OFFICESUBSCRIPTION; provisioningStatus=Success; appliesTo=User}, @{servicePlanId=0feaeb32-d00e-4d66-bd5a-43b5b83db82c; servicePlanName=MCOSTANDARD; provisioningStatus=Success; appliesTo=User}, @{servicePlanId=3e26ee1f-8a5f-4d52-aee2-b81ce45c8f40; servicePlanName=MCOMEETADV; provisioningStatus=Success; appliesTo=User}, @{servicePlanId=4828c8ec-dc2e-4779-b502-87ac9ce28ab7; servicePlanName=MCOEV; provisioningStatus=Success; appliesTo=User}, @{servicePlanId=9f431833-0334-42de-a7dc-70aa40db46db; servicePlanName=LOCKBOX_ENTERPRISE; provisioningStatus=Success; appliesTo=User}, @{servicePlanId=882e1d05-acd1-4ccb-8708-6ee03664b117; servicePlanName=INTUNE_O365; provisioningStatus=PendingActivation; appliesTo=Company}, @{servicePlanId=efb87545-963c-4e0d-99df-69c6916d9eb0; servicePlanName=EXCHANGE_S_ENTERPRISE; provisioningStatus=Success; appliesTo=User}, @{servicePlanId=34c0d7a0-a70f-4668-9238-47f9fc208882; servicePlanName=EXCHANGE_ANALYTICS; provisioningStatus=Success; appliesTo=User}, @{servicePlanId=4de31727-a228-4ec3-a5bf-8e45b5ca48cc; servicePlanName=EQUIVIO_ANALYTICS; provisioningStatus=Success; appliesTo=User}, @{servicePlanId=70d33638-9c74-4d01-bfd3-562de28bd4ba; servicePlanName=BI_AZURE_P2; provisioningStatus=Success; appliesTo=User}, @{servicePlanId=f20fedf3-f3c3-43c3-8267-2bfdd51c0939; servicePlanName=ATP_ENTERPRISE; provisioningStatus=Success; appliesTo=Company}, @{servicePlanId=8c098270-9dd4-4350-9b30-ba4703f3b36b; servicePlanName=ADALLOM_S_O365; provisioningStatus=Success; appliesTo=User}}	06ebc4ee-1bb5-47dd-8120-11324bc54e06	SPE_E5	{319ce723-9569-4826-aa1f-9ff1c4b96fc8}
342619e0-4a9a-42e4-a66f-1ff9c85d08d6	carecentrix	User	Enabled	1908	342619e0-4a9a-42e4-a66f-1ff9c85d08d6_efccb6f7-5641-4e0e-bd10-b4976e1bf68e		{@{servicePlanId=113feb6c-3fe4-4440-bddc-54d774bf0318; servicePlanName=EXCHANGE_S_FOUNDATION; provisioningStatus=Success; appliesTo=Company}, @{servicePlanId=932ad362-64a8-4783-9106-97849a1a30b9; servicePlanName=ADALLOM_S_DISCOVERY; provisioningStatus=Success; appliesTo=User}, @{servicePlanId=6c57d4b6-3b23-47a5-9bc9-69f17b4947b3; servicePlanName=RMS_S_PREMIUM; provisioningStatus=Success; appliesTo=User}, @{servicePlanId=c1ec4a95-1f05-45b3-a911-aa3fa01094f5; servicePlanName=INTUNE_A; provisioningStatus=Success; appliesTo=User}, @{servicePlanId=bea4c11e-220a-4e6d-8eb8-8ea15d019f90; servicePlanName=RMS_S_ENTERPRISE; provisioningStatus=Success; appliesTo=User}, @{servicePlanId=41781fb2-bc02-4b7c-bd55-b576c07bb09d; servicePlanName=AAD_PREMIUM; provisioningStatus=Success; appliesTo=User}, @{servicePlanId=8a256a2b-b617-496d-b51b-e76466e88db0; servicePlanName=MFA_PREMIUM; provisioningStatus=Success; appliesTo=User}}	efccb6f7-5641-4e0e-bd10-b4976e1bf68e	EMS	{a4b57e7e-4c1b-4200-9c5e-352911442f29, 3225e6ae-6b91-4e22-8d58-61d27846a2c2}
342619e0-4a9a-42e4-a66f-1ff9c85d08d6	carecentrix	User	Enabled	1889	342619e0-4a9a-42e4-a66f-1ff9c85d08d6_0c266dff-15dd-4b49-8397-2bb16070ed52		{@{servicePlanId=3e26ee1f-8a5f-4d52-aee2-b81ce45c8f40; servicePlanName=MCOMEETADV; provisioningStatus=Success; appliesTo=User}}	0c266dff-15dd-4b49-8397-2bb16070ed52	MCOMEETADV	{8fd72e22-7b12-4ebc-8dc4-36c5fac7711a}
342619e0-4a9a-42e4-a66f-1ff9c85d08d6	carecentrix	Company	Enabled	0	342619e0-4a9a-42e4-a66f-1ff9c85d08d6_093e8d14-a334-43d9-93e3-30589a8b47d0		{@{servicePlanId=113feb6c-3fe4-4440-bddc-54d774bf0318; servicePlanName=EXCHANGE_S_FOUNDATION; provisioningStatus=Success; appliesTo=Company}, @{servicePlanId=31cf2cfc-6b0d-4adc-a336-88b724ed8122; servicePlanName=RMS_S_BASIC; provisioningStatus=Success; appliesTo=Company}}	093e8d14-a334-43d9-93e3-30589a8b47d0	RMSBASIC	{0fc3262c-e836-4190-9246-054fb8a99a94}
342619e0-4a9a-42e4-a66f-1ff9c85d08d6	carecentrix	User	Enabled	67	342619e0-4a9a-42e4-a66f-1ff9c85d08d6_53818b1b-4a27-454b-8896-0dba576410e6		{@{servicePlanId=818523f5-016b-4355-9be8-ed6944946ea7; servicePlanName=PROJECT_PROFESSIONAL; provisioningStatus=Success; appliesTo=User}, @{servicePlanId=fa200448-008c-4acb-abd4-ea106ed2199d; servicePlanName=FLOW_FOR_PROJECT; provisioningStatus=Success; appliesTo=User}, @{servicePlanId=50554c47-71d9-49fd-bc54-42a2765c555c; servicePlanName=DYN365_CDS_PROJECT; provisioningStatus=Success; appliesTo=User}, @{servicePlanId=113feb6c-3fe4-4440-bddc-54d774bf0318; servicePlanName=EXCHANGE_S_FOUNDATION; provisioningStatus=Success; appliesTo=Company}, @{servicePlanId=e95bec33-7c88-4a70-8e19-b10bd9d0c014; servicePlanName=SHAREPOINTWAC; provisioningStatus=Success; appliesTo=User}, @{servicePlanId=fe71d6c3-a2ea-4499-9778-da042bf08063; servicePlanName=SHAREPOINT_PROJECT; provisioningStatus=Success; appliesTo=User}, @{servicePlanId=5dbe027f-2339-4123-9542-606e4d348a72; servicePlanName=SHAREPOINTENTERPRISE; provisioningStatus=Success; appliesTo=User}, @{servicePlanId=fafd7243-e5c1-4a3a-9e40-495efcb1d3c3; servicePlanName=PROJECT_CLIENT_SUBSCRIPTION; provisioningStatus=Success; appliesTo=User}}	53818b1b-4a27-454b-8896-0dba576410e6	PROJECTPROFESSIONAL	{bd6fd8fb-7da0-487b-966a-ac6528a7b438}
342619e0-4a9a-42e4-a66f-1ff9c85d08d6	carecentrix	User	Enabled	25	342619e0-4a9a-42e4-a66f-1ff9c85d08d6_ddece720-327c-4056-bbd7-b7a2fbaec735		{@{servicePlanId=c7022e1e-c71e-479d-8901-6361e33197cf; servicePlanName=MCOMEETADV_DIALOUT_US; provisioningStatus=Success; appliesTo=User}}	ddece720-327c-4056-bbd7-b7a2fbaec735	MCOMEETADV_DIALOUT_US	{b05217a2-87e3-4a0d-9cf2-91bd543bf6d0}
342619e0-4a9a-42e4-a66f-1ff9c85d08d6	carecentrix	User	Enabled	5	342619e0-4a9a-42e4-a66f-1ff9c85d08d6_a2367322-2be4-443f-837c-06798507b89d		{@{servicePlanId=3eeb8536-fecf-41bf-a3f8-d6f17a9f3efc; servicePlanName=Intune_ServiceNow; provisioningStatus=Success; appliesTo=User}, @{servicePlanId=a4c6cf29-1168-4076-ba5c-e8fe0e62b17e; servicePlanName=REMOTE_HELP; provisioningStatus=Success; appliesTo=User}}	a2367322-2be4-443f-837c-06798507b89d	Remote_Help_AddOn	{5c1a47ff-3eeb-4908-8e71-989d9863f827}
342619e0-4a9a-42e4-a66f-1ff9c85d08d6	carecentrix	User	Enabled	8	342619e0-4a9a-42e4-a66f-1ff9c85d08d6_52ea0e27-ae73-4983-a08f-13561ebdb823		{@{servicePlanId=f8566154-2a62-48cb-a0ab-d4d25be26e51; servicePlanName=PLACES_ENHANCED; provisioningStatus=Success; appliesTo=User}, @{servicePlanId=ab2d4fb5-f80a-4bf1-a11d-7f1da254041b; servicePlanName=QUEUES_APP; provisioningStatus=Success; appliesTo=User}, @{servicePlanId=acbca54f-c771-423b-a476-6d7a98cbbcec; servicePlanName=MESH_IMMERSIVE; provisioningStatus=Success; appliesTo=User}, @{servicePlanId=78b58230-ec7e-4309-913c-93a45cc4735b; servicePlanName=TEAMSPRO_WEBINAR; provisioningStatus=Success; appliesTo=User}, @{servicePlanId=711413d0-b36e-4cd4-93db-0a50a4ab7ea3; servicePlanName=MCO_VIRTUAL_APPT; provisioningStatus=Success; appliesTo=User}, @{servicePlanId=9104f592-f2a7-4f77-904c-ca5a5715883f; servicePlanName=TEAMSPRO_VIRTUALAPPT; provisioningStatus=Success; appliesTo=User}, @{servicePlanId=f8b44f54-18bb-46a3-9658-44ab58712968; servicePlanName=TEAMSPRO_PROTECTION; provisioningStatus=Success; appliesTo=User}, @{servicePlanId=cc8c0802-a325-43df-8cba-995d0c6cb373; servicePlanName=TEAMSPRO_CUST; provisioningStatus=Success; appliesTo=User}, @{servicePlanId=0504111f-feb8-4a3c-992a-70280f9a2869; servicePlanName=TEAMSPRO_MGMT; provisioningStatus=Success; appliesTo=User}, @{servicePlanId=85704d55-2e73-47ee-93b4-4b8ea14db92b; servicePlanName=MICROSOFT_ECDN; provisioningStatus=Success; appliesTo=Company}}	52ea0e27-ae73-4983-a08f-13561ebdb823	Teams_Premium_(for_Departments)	{bb966b94-ce3f-4210-8c98-a8353af48cb6}
342619e0-4a9a-42e4-a66f-1ff9c85d08d6	carecentrix	User	Enabled	1	342619e0-4a9a-42e4-a66f-1ff9c85d08d6_1e1a282c-9c54-43a2-9310-98ef728faace		{@{servicePlanId=60bf28f9-2b70-4522-96f7-335f5e06c941; servicePlanName=Power_Pages_Internal_User; provisioningStatus=Success; appliesTo=User}, @{servicePlanId=a933a62f-c3fb-48e5-a0b7-ac92b94b4420; servicePlanName=Microsoft_Viva_Sales_PowerAutomate; provisioningStatus=Success; appliesTo=User}, @{servicePlanId=8ba1ff15-7bf6-4620-b65c-ecedb6942766; servicePlanName=Microsoft_Viva_Sales_PremiumTrial; provisioningStatus=Success; appliesTo=User}, @{servicePlanId=8839ef0e-91f1-4085-b485-62e06e7c7987; servicePlanName=Forms_Pro_SalesEnt; provisioningStatus=Success; appliesTo=User}, @{servicePlanId=113feb6c-3fe4-4440-bddc-54d774bf0318; servicePlanName=EXCHANGE_S_FOUNDATION; provisioningStatus=Success; appliesTo=Company}, @{servicePlanId=7e6d7d78-73de-46ba-83b1-6d25117334ba; servicePlanName=FLOW_DYN_APPS; provisioningStatus=Success; appliesTo=User}, @{servicePlanId=874fc546-6efe-4d22-90b8-5c4e7aa59f4b; servicePlanName=POWERAPPS_DYN_APPS; provisioningStatus=Success; appliesTo=User}, @{servicePlanId=5dbe027f-2339-4123-9542-606e4d348a72; servicePlanName=SHAREPOINTENTERPRISE; provisioningStatus=Success; appliesTo=User}, @{servicePlanId=e95bec33-7c88-4a70-8e19-b10bd9d0c014; servicePlanName=SHAREPOINTWAC; provisioningStatus=Success; appliesTo=User}, @{servicePlanId=1259157c-8581-4875-bca7-2ffb18c51bda; servicePlanName=PROJECT_ESSENTIALS; provisioningStatus=Success; appliesTo=User}, @{servicePlanId=03acaee3-9492-4f40-aed4-bcb6b32981b6; servicePlanName=NBENTERPRISE; provisioningStatus=Success; appliesTo=User}, @{servicePlanId=2da8e897-7791-486b-b08f-cc63c8129df7; servicePlanName=DYN365_ENTERPRISE_SALES; provisioningStatus=Success; appliesTo=User}}	1e1a282c-9c54-43a2-9310-98ef728faace	DYN365_ENTERPRISE_SALES	{12582f0e-6fdf-42b7-9130-403268994f01}
342619e0-4a9a-42e4-a66f-1ff9c85d08d6	carecentrix	User	Enabled	1	342619e0-4a9a-42e4-a66f-1ff9c85d08d6_16a55f2f-ff35-4cd5-9146-fb784e3761a5		{@{servicePlanId=1689aade-3d6a-4bfc-b017-46d2672df5ad; servicePlanName=Intune_Defender; provisioningStatus=Success; appliesTo=Company}, @{servicePlanId=292cc034-7b7c-4950-aaf5-943befd3f1d4; servicePlanName=MDE_LITE; provisioningStatus=Success; appliesTo=User}}	16a55f2f-ff35-4cd5-9146-fb784e3761a5	DEFENDER_ENDPOINT_P1	{a19b4e6d-0de3-47f9-a52a-817eefe23542}
342619e0-4a9a-42e4-a66f-1ff9c85d08d6	carecentrix	User	Enabled	1888	342619e0-4a9a-42e4-a66f-1ff9c85d08d6_1c27243e-fb4d-42b1-ae8c-fe25c9616588		{@{servicePlanId=9974d6cf-cd24-4ba2-921c-e2aa687da846; servicePlanName=MCOMEETBASIC; provisioningStatus=Success; appliesTo=User}}	1c27243e-fb4d-42b1-ae8c-fe25c9616588	Microsoft_Teams_Audio_Conferencing_select_dial_out	{979535d6-f740-4394-91e8-fc09a826cd8a, bb619395-7759-411d-b455-392340ef874e}
342619e0-4a9a-42e4-a66f-1ff9c85d08d6	carecentrix	User	Enabled	7	342619e0-4a9a-42e4-a66f-1ff9c85d08d6_5b631642-bd26-49fe-bd20-1daaa972ef80		{@{servicePlanId=113feb6c-3fe4-4440-bddc-54d774bf0318; servicePlanName=EXCHANGE_S_FOUNDATION; provisioningStatus=Success; appliesTo=Company}, @{servicePlanId=d8c638e2-9508-40e3-9877-feb87603837b; servicePlanName=DYN365_CDS_DEV_VIRAL; provisioningStatus=Success; appliesTo=User}, @{servicePlanId=c7ce3f26-564d-4d3a-878d-d8ab868c85fe; servicePlanName=FLOW_DEV_VIRAL; provisioningStatus=Success; appliesTo=User}, @{servicePlanId=a2729df7-25f8-4e63-984b-8a8484121554; servicePlanName=POWERAPPS_DEV_VIRAL; provisioningStatus=Success; appliesTo=User}}	5b631642-bd26-49fe-bd20-1daaa972ef80	POWERAPPS_DEV	{d76cb20b-43ca-4b83-8725-fecc63beaf14}
342619e0-4a9a-42e4-a66f-1ff9c85d08d6	carecentrix	User	Enabled	2	342619e0-4a9a-42e4-a66f-1ff9c85d08d6_46102f44-d912-47e7-b0ca-1bd7b70ada3b		{@{servicePlanId=5dbe027f-2339-4123-9542-606e4d348a72; servicePlanName=SHAREPOINTENTERPRISE; provisioningStatus=Success; appliesTo=User}, @{servicePlanId=818523f5-016b-4355-9be8-ed6944946ea7; servicePlanName=PROJECT_PROFESSIONAL; provisioningStatus=Success; appliesTo=User}, @{servicePlanId=fe71d6c3-a2ea-4499-9778-da042bf08063; servicePlanName=SHAREPOINT_PROJECT; provisioningStatus=Success; appliesTo=User}, @{servicePlanId=fafd7243-e5c1-4a3a-9e40-495efcb1d3c3; servicePlanName=PROJECT_CLIENT_SUBSCRIPTION; provisioningStatus=Success; appliesTo=User}, @{servicePlanId=e95bec33-7c88-4a70-8e19-b10bd9d0c014; servicePlanName=SHAREPOINTWAC; provisioningStatus=Success; appliesTo=User}, @{servicePlanId=fa200448-008c-4acb-abd4-ea106ed2199d; servicePlanName=FLOW_FOR_PROJECT; provisioningStatus=Success; appliesTo=User}, @{servicePlanId=113feb6c-3fe4-4440-bddc-54d774bf0318; servicePlanName=EXCHANGE_S_FOUNDATION; provisioningStatus=Success; appliesTo=Company}, @{servicePlanId=50554c47-71d9-49fd-bc54-42a2765c555c; servicePlanName=DYN365_CDS_PROJECT; provisioningStatus=Success; appliesTo=User}}	46102f44-d912-47e7-b0ca-1bd7b70ada3b	PROJECT_PLAN3_DEPT	{9185e9d5-c0bc-45fb-84a3-c75bbe5039b9}

M365 Documentation

Date: 15:48 19.05.2025 Components: AzureAD Tenant: CareCentrix, Inc.

Contents

TOC

Authentication Method Policies

Authentication methods policies define authentication methods and the users that are allowed to use them to sign in and perform multi-factor authentication (MFA) in Azure Active Directory (Azure AD). Authentication methods policies that can be managed in Microsoft Graph include FIDO2 Security Keys and Passwordless Phone Sign-in with Microsoft Authenticator app.

Temporary Access Pass

Email

Text Message

Organizational branding

Organizations can customize their Azure AD sign-in pages which appear when users sign in to their organization's tenant-specific apps, or when Azure AD identifies the user's tenant from their username. A developer can also read the company's branding information and customize their app experience to tailor it specifically for the signed-in user using their company's branding.

Conditional Access Policies

This section contains a list of all conditional Access policies configured in Azure AD.

Property	Value
C_ApplicationsExclude
C_ApplicationsInclude	Office365
C_ApplicationsIncludeUserActions
C_ClientAppTypes	exchangeActiveSync,browser,mobileAppsAndDesktopClients,other
C_Devices
C_DeviceStates
C_LocationsExclude
C_LocationsInclude
C_PlatformsExclude
C_PlatformsInclude	android,iOS
C_SignInRiskLevel
C_UsersExclude
C_UsersExcludeGroups	R_Intune_Mobile_Access
C_UsersExcludeRoles
C_UsersInclude	All
C_UsersIncludeGroups
C_UsersIncludeRoles
G_BuiltInControls	block
G_CustomControls
G_Operator	OR
G_TermsOfUse
M_Created	2022-02-17T21:12:20.8304534Z
M_DisplayName	CA - CCX - M365 - Block Unapproved Mobile Users
M_Id	3e3b4744-0993-4f0b-9b85-cc7900e4d924
M_Modified	2024-01-25T21:34:17.1586076Z
M_State	enabled
S_ApplicationEnforcedRestriction
S_CloudAppSecurity
S_CloudAppSecurityType
S_PersistentBrowser
S_PersistentBrowserMode
S_SignInFrequency
S_SignInFrequencyTimeframe

Property	Value
C_ApplicationsExclude
C_ApplicationsInclude	Office365
C_ApplicationsIncludeUserActions
C_ClientAppTypes	all
C_Devices
C_DeviceStates
C_LocationsExclude	133e40bf-ecd0-4bcd-8d4c-434fec8df72d
C_LocationsInclude	All
C_PlatformsExclude
C_PlatformsInclude	android,iOS
C_SignInRiskLevel
C_UsersExclude
C_UsersExcludeGroups	R_AAD_Offshore_Access_Mobile
C_UsersExcludeRoles
C_UsersInclude	All
C_UsersIncludeGroups
C_UsersIncludeRoles
G_BuiltInControls	block
G_CustomControls
G_Operator	OR
G_TermsOfUse
M_Created	2022-03-22T20:23:37.3397458Z
M_DisplayName	CA - CCX - Global - Restrict Mobile Access to US
M_Id	d110337f-09ee-4ec7-97d1-173a3ba97d6e
M_Modified	2023-08-29T16:05:56.0085224Z
M_State	enabled
S_ApplicationEnforcedRestriction
S_CloudAppSecurity
S_CloudAppSecurityType
S_PersistentBrowser
S_PersistentBrowserMode
S_SignInFrequency
S_SignInFrequencyTimeframe

Property	Value
C_ApplicationsExclude	VMware Horizon - Unified Access Gateway(17a58be3-afbe-45c4-a4ab-4e7640c285fc)
C_ApplicationsInclude	All
C_ApplicationsIncludeUserActions
C_ClientAppTypes	all
C_Devices
C_DeviceStates
C_LocationsExclude	AllTrusted
C_LocationsInclude	All
C_PlatformsExclude
C_PlatformsInclude	macOS
C_SignInRiskLevel
C_UsersExclude
C_UsersExcludeGroups
C_UsersExcludeRoles
C_UsersInclude	All
C_UsersIncludeGroups
C_UsersIncludeRoles
G_BuiltInControls	compliantDevice
G_CustomControls
G_Operator	OR
G_TermsOfUse
M_Created	2022-03-31T13:54:15.2358463Z
M_DisplayName	CA - CCX - M365 - Grant Compliance Access- MacOS
M_Id	76f1d229-e04d-4490-8dc9-a6ba605b0f82
M_Modified	2025-05-13T12:27:21.1072702Z
M_State	enabled
S_ApplicationEnforcedRestriction
S_CloudAppSecurity
S_CloudAppSecurityType
S_PersistentBrowser
S_PersistentBrowserMode
S_SignInFrequency	True
S_SignInFrequencyTimeframe	7 days

Property	Value
C_ApplicationsExclude	VMware Horizon - Unified Access Gateway(17a58be3-afbe-45c4-a4ab-4e7640c285fc)
C_ApplicationsInclude	All
C_ApplicationsIncludeUserActions
C_ClientAppTypes	all
C_Devices
C_DeviceStates
C_LocationsExclude	0e8b6659-0af2-4ead-bf4d-fc7a69efe298
C_LocationsInclude	All
C_PlatformsExclude
C_PlatformsInclude	linux
C_SignInRiskLevel
C_UsersExclude
C_UsersExcludeGroups
C_UsersExcludeRoles
C_UsersInclude	All
C_UsersIncludeGroups
C_UsersIncludeRoles
G_BuiltInControls	block
G_CustomControls
G_Operator	OR
G_TermsOfUse
M_Created	2022-08-09T15:32:33.3564342Z
M_DisplayName	CA - CCX - Global - Block Linux External Access
M_Id	a0463337-0645-4708-b0e5-98e5966e1f55
M_Modified	2025-01-03T13:36:42.5390569Z
M_State	enabled
S_ApplicationEnforcedRestriction
S_CloudAppSecurity
S_CloudAppSecurityType
S_PersistentBrowser
S_PersistentBrowserMode
S_SignInFrequency
S_SignInFrequencyTimeframe

Property	Value
C_ApplicationsExclude
C_ApplicationsInclude	Adobe Identity Management (OIDC)(6aba272b-e383-44cd-8eda-34c66dfd9546) Adobe Workfront(a846bde4-f407-45ea-ad51-c0fc77a0bb16) MicrosoftAdminPortals Windows Azure Service Management API(797f4846-ba00-4fd7-ba43-dac1f8f63013) Office365
C_ApplicationsIncludeUserActions
C_ClientAppTypes	all
C_Devices	@{includeDeviceStates=System.Object[]; excludeDeviceStates=System.Object[]; includeDevices=System.Object[]; excludeDevices=System.Object[]; deviceFilter=}
C_DeviceStates
C_LocationsExclude	0e8b6659-0af2-4ead-bf4d-fc7a69efe298
C_LocationsInclude	All
C_PlatformsExclude
C_PlatformsInclude	windows
C_SignInRiskLevel
C_UsersExclude	iCIMS Candidate Tracking Service Account(iCIMSCandidate.TrackingServiceAccount@carecentrix.com)
C_UsersExcludeGroups	AAD_MEM_Autopilot_Troubleshooting
C_UsersExcludeRoles
C_UsersInclude	All
C_UsersIncludeGroups
C_UsersIncludeRoles
G_BuiltInControls	domainJoinedDevice
G_CustomControls
G_Operator	OR
G_TermsOfUse
M_Created	2022-08-15T12:15:36.5634255Z
M_DisplayName	CA - CCX - M365 - Grant Hybrid Join Access - Windows
M_Id	59e77730-c800-4952-8708-f34b80a3267d
M_Modified	2025-05-12T18:32:36.5341764Z
M_State	enabled
S_ApplicationEnforcedRestriction
S_CloudAppSecurity
S_CloudAppSecurityType
S_PersistentBrowser
S_PersistentBrowserMode
S_SignInFrequency	True
S_SignInFrequencyTimeframe	10 days

Property	Value
C_ApplicationsExclude
C_ApplicationsInclude	Palo Alto Networks - GlobalProtect(96c5df68-2489-4cd6-9f01-a25a1ebd5071)
C_ApplicationsIncludeUserActions
C_ClientAppTypes	all
C_Devices
C_DeviceStates
C_LocationsExclude
C_LocationsInclude
C_PlatformsExclude
C_PlatformsInclude
C_SignInRiskLevel
C_UsersExclude
C_UsersExcludeGroups
C_UsersExcludeRoles
C_UsersInclude	All
C_UsersIncludeGroups
C_UsersIncludeRoles
G_BuiltInControls	mfa
G_CustomControls
G_Operator	OR
G_TermsOfUse
M_Created	2022-09-02T13:29:38.5885644Z
M_DisplayName	CA - CCX - PAGlobalProtect - Require MFA
M_Id	64f6402e-fc9d-4fcb-bffc-8a7fe2b433c9
M_Modified	2023-03-21T20:08:34.4480472Z
M_State	enabled
S_ApplicationEnforcedRestriction
S_CloudAppSecurity
S_CloudAppSecurityType
S_PersistentBrowser
S_PersistentBrowserMode
S_SignInFrequency	True
S_SignInFrequencyTimeframe	4 hours

Property	Value
C_ApplicationsExclude
C_ApplicationsInclude	Microsoft Intune Enrollment(d4ebce55-015a-49b5-a083-c84d1797ae8c)
C_ApplicationsIncludeUserActions
C_ClientAppTypes	all
C_Devices	@{includeDeviceStates=System.Object[]; excludeDeviceStates=System.Object[]; includeDevices=System.Object[]; excludeDevices=System.Object[]; deviceFilter=}
C_DeviceStates
C_LocationsExclude	0e8b6659-0af2-4ead-bf4d-fc7a69efe298
C_LocationsInclude	All
C_PlatformsExclude	android,iOS,macOS
C_PlatformsInclude	windows
C_SignInRiskLevel
C_UsersExclude
C_UsersExcludeGroups
C_UsersExcludeRoles
C_UsersInclude	All
C_UsersIncludeGroups
C_UsersIncludeRoles
G_BuiltInControls	mfa,compliantDevice
G_CustomControls
G_Operator	OR
G_TermsOfUse
M_Created	2022-09-21T19:10:46.3478047Z
M_DisplayName	CA - CCX - Intune Enrollment - Enforce MFA
M_Id	7d52c0ab-d842-47c5-b4ca-a1597e64eb9f
M_Modified	2024-05-22T18:52:16.9516782Z
M_State	enabled
S_ApplicationEnforcedRestriction
S_CloudAppSecurity
S_CloudAppSecurityType
S_PersistentBrowser
S_PersistentBrowserMode
S_SignInFrequency	True
S_SignInFrequencyTimeframe	5 days

Property	Value
C_ApplicationsExclude
C_ApplicationsInclude	Office365
C_ApplicationsIncludeUserActions
C_ClientAppTypes	all
C_Devices	@{includeDeviceStates=System.Object[]; excludeDeviceStates=System.Object[]; includeDevices=System.Object[]; excludeDevices=System.Object[]; deviceFilter=}
C_DeviceStates
C_LocationsExclude	0e8b6659-0af2-4ead-bf4d-fc7a69efe298
C_LocationsInclude	All
C_PlatformsExclude
C_PlatformsInclude	windows
C_SignInRiskLevel
C_UsersExclude
C_UsersExcludeGroups
C_UsersExcludeRoles
C_UsersInclude	All
C_UsersIncludeGroups
C_UsersIncludeRoles
G_BuiltInControls	compliantDevice
G_CustomControls
G_Operator	OR
G_TermsOfUse
M_Created	2022-09-22T16:04:32.3335064Z
M_DisplayName	CA - CCX - M365 - Grant Compliance Access - AutoPilot
M_Id	c7dc70c0-e9f8-4e15-9781-a77af3800385
M_Modified	2023-01-20T19:55:54.1432067Z
M_State	enabled
S_ApplicationEnforcedRestriction
S_CloudAppSecurity
S_CloudAppSecurityType
S_PersistentBrowser
S_PersistentBrowserMode
S_SignInFrequency	True
S_SignInFrequencyTimeframe	10 days

Property	Value
C_ApplicationsExclude
C_ApplicationsInclude	Office365
C_ApplicationsIncludeUserActions
C_ClientAppTypes	exchangeActiveSync
C_Devices
C_DeviceStates
C_LocationsExclude
C_LocationsInclude
C_PlatformsExclude	android,windows,windowsPhone,macOS,linux
C_PlatformsInclude	iOS
C_SignInRiskLevel
C_UsersExclude
C_UsersExcludeGroups
C_UsersExcludeRoles
C_UsersInclude
C_UsersIncludeGroups	AAD_MEM_iOS_Calendar_Sync
C_UsersIncludeRoles
G_BuiltInControls	mfa,compliantDevice
G_CustomControls
G_Operator	AND
G_TermsOfUse
M_Created	2022-10-12T20:28:29.7053954Z
M_DisplayName	ZZZ - CA - CCX - M365 - Grant O365 Calendar Access - iOS
M_Id	00307607-8bb1-4eb9-96c6-95ecab7ad932
M_Modified	2024-06-14T13:52:07.4310621Z
M_State	disabled
S_ApplicationEnforcedRestriction
S_CloudAppSecurity
S_CloudAppSecurityType
S_PersistentBrowser
S_PersistentBrowserMode
S_SignInFrequency
S_SignInFrequencyTimeframe

Property	Value
C_ApplicationsExclude
C_ApplicationsInclude	Workday (Prod)(4b61b374-6382-428c-8ef4-ec028803b626) Adobe Workfront(a846bde4-f407-45ea-ad51-c0fc77a0bb16) Adobe Identity Management (OIDC)(6aba272b-e383-44cd-8eda-34c66dfd9546) Graph API(ba7a4277-b289-4a26-991b-f5dfc94aada3) MicrosoftAdminPortals Workday (CCX2)(bea684e8-d221-4334-be55-df87934e91a8) Workday (CCX1)(60377700-b284-4127-8cd7-c1a8eaba2012)
C_ApplicationsIncludeUserActions
C_ClientAppTypes	browser,mobileAppsAndDesktopClients
C_Devices
C_DeviceStates
C_LocationsExclude
C_LocationsInclude
C_PlatformsExclude
C_PlatformsInclude	android,iOS
C_SignInRiskLevel
C_UsersExclude	Amason, Andrew(Andrew.Amason@carecentrix.com)
C_UsersExcludeGroups
C_UsersExcludeRoles
C_UsersInclude
C_UsersIncludeGroups	R_Intune_Mobile_Access
C_UsersIncludeRoles
G_BuiltInControls	compliantDevice
G_CustomControls
G_Operator	OR
G_TermsOfUse
M_Created	2022-10-26T12:30:44.5653473Z
M_DisplayName	CA - CCX - MEM - Grant Compliance Access - Mobile
M_Id	dbc6f77d-9990-4625-b347-214a0327ff6f
M_Modified	2025-05-19T13:45:58.961663Z
M_State	enabled
S_ApplicationEnforcedRestriction
S_CloudAppSecurity
S_CloudAppSecurityType
S_PersistentBrowser
S_PersistentBrowserMode
S_SignInFrequency
S_SignInFrequencyTimeframe

Property	Value
C_ApplicationsExclude
C_ApplicationsInclude	Graph API(ba7a4277-b289-4a26-991b-f5dfc94aada3) Microsoft Intune(0000000a-0000-0000-c000-000000000000) Microsoft Intune Enrollment(d4ebce55-015a-49b5-a083-c84d1797ae8c)
C_ApplicationsIncludeUserActions
C_ClientAppTypes	all
C_Devices
C_DeviceStates
C_LocationsExclude
C_LocationsInclude
C_PlatformsExclude
C_PlatformsInclude
C_SignInRiskLevel
C_UsersExclude
C_UsersExcludeGroups
C_UsersExcludeRoles
C_UsersInclude
C_UsersIncludeGroups	AAD_MEM_Autopilot_Troubleshooting
C_UsersIncludeRoles
G_BuiltInControls	mfa
G_CustomControls
G_Operator	OR
G_TermsOfUse
M_Created	2022-10-27T21:33:11.7093232Z
M_DisplayName	CA - CCX - MEM - Autopilot Troubleshooting
M_Id	285eaffe-3a88-4ad6-810b-3adcf01703c2
M_Modified	2025-02-21T13:37:55.172635Z
M_State	enabled
S_ApplicationEnforcedRestriction
S_CloudAppSecurity
S_CloudAppSecurityType
S_PersistentBrowser
S_PersistentBrowserMode
S_SignInFrequency	True
S_SignInFrequencyTimeframe	1 hours

Property	Value
C_ApplicationsExclude
C_ApplicationsInclude	CCX-CyberArk SAML Authentication PVWA 2025(bc15cc8a-6189-4de4-9580-fb7a1b59a186) CCX-CyberArk SAML Authentication(d9e999f7-f8d9-484b-9717-2fe1c0949ad5)
C_ApplicationsIncludeUserActions
C_ClientAppTypes	all
C_Devices
C_DeviceStates
C_LocationsExclude
C_LocationsInclude
C_PlatformsExclude
C_PlatformsInclude
C_SignInRiskLevel
C_UsersExclude
C_UsersExcludeGroups
C_UsersExcludeRoles
C_UsersInclude	All
C_UsersIncludeGroups
C_UsersIncludeRoles
G_BuiltInControls	mfa
G_CustomControls
G_Operator	OR
G_TermsOfUse
M_Created	2022-11-18T19:27:03.7597384Z
M_DisplayName	CA - CCX - CyberArk - Require MFA
M_Id	4bdb9a13-7aaa-4bf4-95b3-fdd5adde1215
M_Modified	2025-05-09T20:27:54.8528808Z
M_State	enabled
S_ApplicationEnforcedRestriction
S_CloudAppSecurity
S_CloudAppSecurityType
S_PersistentBrowser
S_PersistentBrowserMode
S_SignInFrequency	True
S_SignInFrequencyTimeframe	1 hours

Property	Value
C_ApplicationsExclude
C_ApplicationsInclude	Salesforce - HomeBridge Org1 (Prod)(a3c7328f-ae5e-484f-b430-4c3c0136d991) Salesforce Hombridge1 (pjdev Sandbox)(45e5f412-c3ba-4203-8eed-4d9a087604e9) Salesforce Hombridge1 (Backup1 Sandbox)(4f9900f4-fd9f-45dd-a0a6-91ee304d987a) Salesforce Sales (MFA Sandbox)(3ace8261-b1cf-4c6a-b61f-325981299fca) (35c4adb6-2eb7-4e65-a989-50dddb870850) Salesforce Hombridge1 (MFA Sandbox)(0489475e-c795-4943-9253-b688eb4cea33)
C_ApplicationsIncludeUserActions
C_ClientAppTypes	all
C_Devices
C_DeviceStates
C_LocationsExclude
C_LocationsInclude
C_PlatformsExclude
C_PlatformsInclude
C_SignInRiskLevel
C_UsersExclude
C_UsersExcludeGroups
C_UsersExcludeRoles
C_UsersInclude	All
C_UsersIncludeGroups
C_UsersIncludeRoles
G_BuiltInControls	mfa
G_CustomControls
G_Operator	OR
G_TermsOfUse
M_Created	2023-02-09T15:30:50.8612667Z
M_DisplayName	CA - CCX - Salesforce - Require MFA
M_Id	8ac99af1-b5de-4434-ad1e-fb5439937a91
M_Modified	2023-04-21T01:14:42.0273544Z
M_State	enabled
S_ApplicationEnforcedRestriction
S_CloudAppSecurity
S_CloudAppSecurityType
S_PersistentBrowser
S_PersistentBrowserMode
S_SignInFrequency
S_SignInFrequencyTimeframe

Property	Value
C_ApplicationsExclude
C_ApplicationsInclude	Apple Business Manager(fc67d51f-bf39-4530-8155-3714f897281b) Apple Internet Accounts(f8d98a96-0999-43f5-8af3-69971c7bb423)
C_ApplicationsIncludeUserActions
C_ClientAppTypes	all
C_Devices
C_DeviceStates
C_LocationsExclude
C_LocationsInclude
C_PlatformsExclude
C_PlatformsInclude	android,iOS
C_SignInRiskLevel
C_UsersExclude
C_UsersExcludeGroups
C_UsersExcludeRoles
C_UsersInclude
C_UsersIncludeGroups	R_Intune_Mobile_Access
C_UsersIncludeRoles
G_BuiltInControls	mfa
G_CustomControls
G_Operator	OR
G_TermsOfUse
M_Created	2023-05-18T13:30:48.7571343Z
M_DisplayName	CA - CCX - M365 - Grant ABM Access
M_Id	8ed226b3-fbb5-4a9f-9e39-c8d4e32aa7a9
M_Modified
M_State	enabled
S_ApplicationEnforcedRestriction
S_CloudAppSecurity
S_CloudAppSecurityType
S_PersistentBrowser
S_PersistentBrowserMode
S_SignInFrequency
S_SignInFrequencyTimeframe

Property	Value
C_ApplicationsExclude
C_ApplicationsInclude	All
C_ApplicationsIncludeUserActions
C_ClientAppTypes	all
C_Devices
C_DeviceStates
C_LocationsExclude
C_LocationsInclude
C_PlatformsExclude	android,iOS,windows,windowsPhone,macOS,linux
C_PlatformsInclude	all
C_SignInRiskLevel
C_UsersExclude	Boatright, Kevin(Kevin.Boatright@carecentrix.com)
C_UsersExcludeGroups
C_UsersExcludeRoles
C_UsersInclude	All
C_UsersIncludeGroups
C_UsersIncludeRoles
G_BuiltInControls	block
G_CustomControls
G_Operator	OR
G_TermsOfUse
M_Created	2023-06-27T19:19:49.4479974Z
M_DisplayName	CA - CCX - Global - Block access for unknown or unsupported device platform
M_Id	078daecb-3500-4641-9a2d-0f4486ffac05
M_Modified	2024-05-22T17:24:39.0407319Z
M_State	enabled
S_ApplicationEnforcedRestriction
S_CloudAppSecurity
S_CloudAppSecurityType
S_PersistentBrowser
S_PersistentBrowserMode
S_SignInFrequency
S_SignInFrequencyTimeframe

Property	Value
C_ApplicationsExclude
C_ApplicationsInclude	All
C_ApplicationsIncludeUserActions
C_ClientAppTypes	exchangeActiveSync,other
C_Devices
C_DeviceStates
C_LocationsExclude
C_LocationsInclude
C_PlatformsExclude
C_PlatformsInclude
C_SignInRiskLevel
C_UsersExclude	Amason, Andrew(Andrew.Amason@carecentrix.com)
C_UsersExcludeGroups
C_UsersExcludeRoles
C_UsersInclude	All
C_UsersIncludeGroups
C_UsersIncludeRoles
G_BuiltInControls	block
G_CustomControls
G_Operator	OR
G_TermsOfUse
M_Created	2023-07-05T18:46:02.5563718Z
M_DisplayName	CA - CCX - Global - Block legacy authentication
M_Id	68063282-76fe-475d-9177-cf17f411f4f4
M_Modified	2024-06-23T00:02:11.9459079Z
M_State	enabled
S_ApplicationEnforcedRestriction
S_CloudAppSecurity
S_CloudAppSecurityType
S_PersistentBrowser
S_PersistentBrowserMode
S_SignInFrequency
S_SignInFrequencyTimeframe

Property	Value
C_ApplicationsExclude
C_ApplicationsInclude	Palo Alto Networks - GlobalProtect(96c5df68-2489-4cd6-9f01-a25a1ebd5071) Office365
C_ApplicationsIncludeUserActions
C_ClientAppTypes	all
C_Devices
C_DeviceStates
C_LocationsExclude
C_LocationsInclude
C_PlatformsExclude
C_PlatformsInclude	all
C_SignInRiskLevel
C_UsersExclude
C_UsersExcludeGroups	R_Allow_Bypass_TimeRestriction
C_UsersExcludeRoles
C_UsersInclude
C_UsersIncludeGroups	R_Block_All_Access R_Block_All_Access_RCM
C_UsersIncludeRoles
G_BuiltInControls	block
G_CustomControls
G_Operator	OR
G_TermsOfUse
M_Created	2023-08-03T18:02:44.4020998Z
M_DisplayName	CCX - CA - Block Hourly Users from Connection outside of logonhours
M_Id	34e6cec4-2896-45f3-9a70-240b29b9a7a9
M_Modified	2024-11-16T14:02:50.4320079Z
M_State	enabledForReportingButNotEnforced
S_ApplicationEnforcedRestriction
S_CloudAppSecurity
S_CloudAppSecurityType
S_PersistentBrowser
S_PersistentBrowserMode
S_SignInFrequency
S_SignInFrequencyTimeframe

Property	Value
C_ApplicationsExclude
C_ApplicationsInclude	All
C_ApplicationsIncludeUserActions
C_ClientAppTypes	all
C_Devices
C_DeviceStates
C_LocationsExclude	0e8b6659-0af2-4ead-bf4d-fc7a69efe298
C_LocationsInclude	All
C_PlatformsExclude
C_PlatformsInclude	windows
C_SignInRiskLevel
C_UsersExclude
C_UsersExcludeGroups
C_UsersExcludeRoles
C_UsersInclude	Nguyen, Christopher(Christopher.Nguyen@carecentrix.com) Amason, Andrew(Andrew.Amason@carecentrix.com)
C_UsersIncludeGroups
C_UsersIncludeRoles
G_BuiltInControls	compliantDevice
G_CustomControls
G_Operator	OR
G_TermsOfUse
M_Created	2023-11-09T19:51:02.4973061Z
M_DisplayName	CA - CCX - M365 - Grant Compliance Access - Windows
M_Id	fbf4a646-01d9-40a1-ac13-83571d5f72ff
M_Modified	2024-01-04T19:14:16.7230578Z
M_State	enabledForReportingButNotEnforced
S_ApplicationEnforcedRestriction
S_CloudAppSecurity
S_CloudAppSecurityType
S_PersistentBrowser
S_PersistentBrowserMode
S_SignInFrequency
S_SignInFrequencyTimeframe

Property	Value
C_ApplicationsExclude
C_ApplicationsInclude	MicrosoftAdminPortals
C_ApplicationsIncludeUserActions
C_ClientAppTypes	all
C_Devices
C_DeviceStates
C_LocationsExclude
C_LocationsInclude
C_PlatformsExclude
C_PlatformsInclude
C_SignInRiskLevel
C_UsersExclude
C_UsersExcludeGroups
C_UsersExcludeRoles
C_UsersInclude
C_UsersIncludeGroups
C_UsersIncludeRoles	Global Administrator Security Administrator SharePoint Administrator Exchange Administrator Conditional Access Administrator Helpdesk Administrator Billing Administrator User Administrator Authentication Administrator Application Administrator Cloud Application Administrator Password Administrator Privileged Authentication Administrator Privileged Role Administrator
G_BuiltInControls	mfa
G_CustomControls
G_Operator	OR
G_TermsOfUse
M_Created	2023-11-13T22:46:21.4971797Z
M_DisplayName	Microsoft-managed: Multifactor authentication for admins accessing Microsoft Admin Portals
M_Id	86b5910c-dcba-432d-8e92-761c89592fc2
M_Modified	2024-06-10T20:43:09.6885003Z
M_State	enabled
S_ApplicationEnforcedRestriction
S_CloudAppSecurity
S_CloudAppSecurityType
S_PersistentBrowser
S_PersistentBrowserMode
S_SignInFrequency
S_SignInFrequencyTimeframe

Property	Value
C_ApplicationsExclude
C_ApplicationsInclude	VMware Horizon - Unified Access Gateway(17a58be3-afbe-45c4-a4ab-4e7640c285fc)
C_ApplicationsIncludeUserActions
C_ClientAppTypes	all
C_Devices
C_DeviceStates
C_LocationsExclude
C_LocationsInclude
C_PlatformsExclude
C_PlatformsInclude
C_SignInRiskLevel
C_UsersExclude
C_UsersExcludeGroups
C_UsersExcludeRoles
C_UsersInclude	All
C_UsersIncludeGroups
C_UsersIncludeRoles
G_BuiltInControls	mfa
G_CustomControls
G_Operator	OR
G_TermsOfUse
M_Created	2024-02-09T15:51:46.3678241Z
M_DisplayName	CA - CCX - Horizon VDI - Require MFA
M_Id	c46f1758-eeb3-4fc9-8127-4f65214e051b
M_Modified
M_State	enabled
S_ApplicationEnforcedRestriction
S_CloudAppSecurity
S_CloudAppSecurityType
S_PersistentBrowser
S_PersistentBrowserMode
S_SignInFrequency
S_SignInFrequencyTimeframe

Property	Value
C_ApplicationsExclude	Adobe Workfront(a846bde4-f407-45ea-ad51-c0fc77a0bb16) Adobe Identity Management (OIDC)(6aba272b-e383-44cd-8eda-34c66dfd9546) Graph API(ba7a4277-b289-4a26-991b-f5dfc94aada3) MicrosoftAdminPortals Workday (CCX2)(bea684e8-d221-4334-be55-df87934e91a8) Workday (CCX1)(60377700-b284-4127-8cd7-c1a8eaba2012) iCares Acheivers Prod(89a8edbd-eda9-408a-86e2-b1791c34acaf) iCares Achievers Non-Prod(1278cadf-4d1f-4da4-af94-b04bfebae3a2) VMware Horizon - Unified Access Gateway(17a58be3-afbe-45c4-a4ab-4e7640c285fc)
C_ApplicationsInclude	All
C_ApplicationsIncludeUserActions
C_ClientAppTypes	browser,mobileAppsAndDesktopClients
C_Devices
C_DeviceStates
C_LocationsExclude
C_LocationsInclude
C_PlatformsExclude
C_PlatformsInclude	android,iOS
C_SignInRiskLevel
C_UsersExclude
C_UsersExcludeGroups
C_UsersExcludeRoles
C_UsersInclude
C_UsersIncludeGroups	R_Intune_Mobile_Access
C_UsersIncludeRoles
G_BuiltInControls	compliantDevice,compliantApplication
G_CustomControls
G_Operator	AND
G_TermsOfUse
M_Created	2024-05-01T17:36:58.904788Z
M_DisplayName	CA - CCX - MEM - Grant Compliance Access - App Protection - Mobile
M_Id	e50a2e91-a37f-43e0-a623-b19606cd19b8
M_Modified	2025-05-12T18:31:37.3953553Z
M_State	enabled
S_ApplicationEnforcedRestriction
S_CloudAppSecurity
S_CloudAppSecurityType
S_PersistentBrowser
S_PersistentBrowserMode
S_SignInFrequency
S_SignInFrequencyTimeframe

Property	Value
C_ApplicationsExclude	VMware Horizon - Unified Access Gateway(17a58be3-afbe-45c4-a4ab-4e7640c285fc)
C_ApplicationsInclude	All
C_ApplicationsIncludeUserActions
C_ClientAppTypes	all
C_Devices
C_DeviceStates
C_LocationsExclude	133e40bf-ecd0-4bcd-8d4c-434fec8df72d
C_LocationsInclude	All
C_PlatformsExclude
C_PlatformsInclude	windows,macOS,linux
C_SignInRiskLevel
C_UsersExclude
C_UsersExcludeGroups	R_AAD_Offshore_Access_Desktop
C_UsersExcludeRoles
C_UsersInclude	All
C_UsersIncludeGroups
C_UsersIncludeRoles
G_BuiltInControls	block
G_CustomControls
G_Operator	OR
G_TermsOfUse
M_Created	2024-05-14T16:21:34.1740646Z
M_DisplayName	CA - CCX - Global - Restrict Desktop Access to US
M_Id	4b2d07c0-3cf2-4810-847c-d2b3e533478e
M_Modified	2024-08-25T00:59:16.8055874Z
M_State	enabled
S_ApplicationEnforcedRestriction
S_CloudAppSecurity
S_CloudAppSecurityType
S_PersistentBrowser
S_PersistentBrowserMode
S_SignInFrequency
S_SignInFrequencyTimeframe

Property	Value
C_ApplicationsExclude
C_ApplicationsInclude	(2fa253eb-05fe-4877-9bdb-3c085f9288ac)
C_ApplicationsIncludeUserActions
C_ClientAppTypes	all
C_Devices
C_DeviceStates
C_LocationsExclude
C_LocationsInclude
C_PlatformsExclude
C_PlatformsInclude
C_SignInRiskLevel
C_UsersExclude
C_UsersExcludeGroups
C_UsersExcludeRoles
C_UsersInclude	All
C_UsersIncludeGroups
C_UsersIncludeRoles
G_BuiltInControls	mfa
G_CustomControls
G_Operator	OR
G_TermsOfUse
M_Created	2024-06-17T18:52:54.4123008Z
M_DisplayName	CA - CCX - Provider Portal - MFA POC - Require MFA
M_Id	a20b3ea9-8f59-4d57-bfd5-1589c345da65
M_Modified	2024-06-21T21:09:19.9669461Z
M_State	enabled
S_ApplicationEnforcedRestriction
S_CloudAppSecurity
S_CloudAppSecurityType
S_PersistentBrowser
S_PersistentBrowserMode
S_SignInFrequency
S_SignInFrequencyTimeframe

Property	Value
C_ApplicationsExclude
C_ApplicationsInclude	NICE CXone - Troubleshooting(b4cc398a-99da-4eb5-a688-525a4b35a65d) NICE EEM(402a8daa-dc65-4c18-9842-beef25f7e084) NICE NDE(dc8bfd1a-51fb-42d5-9398-b4fe7791590b) Nice WFM(d0be22d3-0d40-431b-87a6-f26654b44694) NICE CXone(15cde0a7-7611-4432-8a8c-dd7d6eded99a)
C_ApplicationsIncludeUserActions
C_ClientAppTypes	all
C_Devices
C_DeviceStates
C_LocationsExclude
C_LocationsInclude
C_PlatformsExclude
C_PlatformsInclude
C_SignInRiskLevel
C_UsersExclude
C_UsersExcludeGroups
C_UsersExcludeRoles
C_UsersInclude	All
C_UsersIncludeGroups
C_UsersIncludeRoles
G_BuiltInControls	mfa
G_CustomControls
G_Operator	OR
G_TermsOfUse
M_Created	2024-08-01T16:41:41.0357993Z
M_DisplayName	CA - CCX - Nice - Require MFA
M_Id	f1849c07-5c67-458e-84ec-59514427ded1
M_Modified	2024-11-25T15:31:22.6475098Z
M_State	enabled
S_ApplicationEnforcedRestriction
S_CloudAppSecurity
S_CloudAppSecurityType
S_PersistentBrowser
S_PersistentBrowserMode
S_SignInFrequency
S_SignInFrequencyTimeframe

Property	Value
C_ApplicationsExclude
C_ApplicationsInclude	AWS IAM Identity Center (CCX)(280da9ad-192a-4b64-a323-d9a7bf129d38)
C_ApplicationsIncludeUserActions
C_ClientAppTypes	all
C_Devices
C_DeviceStates
C_LocationsExclude
C_LocationsInclude
C_PlatformsExclude
C_PlatformsInclude
C_SignInRiskLevel
C_UsersExclude
C_UsersExcludeGroups
C_UsersExcludeRoles
C_UsersInclude	All
C_UsersIncludeGroups
C_UsersIncludeRoles
G_BuiltInControls	mfa
G_CustomControls
G_Operator	OR
G_TermsOfUse
M_Created	2024-08-02T00:47:57.4759172Z
M_DisplayName	CA - CCX - AWS - Require MFA
M_Id	55a52b38-c772-4abf-aeca-79080fe165b3
M_Modified	2024-08-02T00:59:29.7448389Z
M_State	enabled
S_ApplicationEnforcedRestriction
S_CloudAppSecurity
S_CloudAppSecurityType
S_PersistentBrowser
S_PersistentBrowserMode
S_SignInFrequency	True
S_SignInFrequencyTimeframe	2 hours

Property	Value
C_ApplicationsExclude
C_ApplicationsInclude	AWS IAM Identity Center (CCX)(280da9ad-192a-4b64-a323-d9a7bf129d38)
C_ApplicationsIncludeUserActions
C_ClientAppTypes	all
C_Devices
C_DeviceStates
C_LocationsExclude	0e8b6659-0af2-4ead-bf4d-fc7a69efe298
C_LocationsInclude	All
C_PlatformsExclude
C_PlatformsInclude
C_SignInRiskLevel
C_UsersExclude
C_UsersExcludeGroups
C_UsersExcludeRoles
C_UsersInclude	All
C_UsersIncludeGroups
C_UsersIncludeRoles
G_BuiltInControls	compliantDevice,domainJoinedDevice
G_CustomControls
G_Operator	OR
G_TermsOfUse
M_Created	2024-08-02T01:02:34.44919Z
M_DisplayName	CA - CCX - AWS - Require CCX Network/Devices
M_Id	32e0efd9-8e39-4347-8ebb-e182954a08c6
M_Modified	2024-08-02T01:04:01.2516409Z
M_State	enabled
S_ApplicationEnforcedRestriction
S_CloudAppSecurity
S_CloudAppSecurityType
S_PersistentBrowser
S_PersistentBrowserMode
S_SignInFrequency
S_SignInFrequencyTimeframe

Property	Value
C_ApplicationsExclude
C_ApplicationsInclude	NICE CXone - Troubleshooting(b4cc398a-99da-4eb5-a688-525a4b35a65d) NICE NDE(dc8bfd1a-51fb-42d5-9398-b4fe7791590b) NICE CXone(15cde0a7-7611-4432-8a8c-dd7d6eded99a)
C_ApplicationsIncludeUserActions
C_ClientAppTypes	all
C_Devices
C_DeviceStates
C_LocationsExclude	0e8b6659-0af2-4ead-bf4d-fc7a69efe298
C_LocationsInclude	All
C_PlatformsExclude
C_PlatformsInclude
C_SignInRiskLevel
C_UsersExclude
C_UsersExcludeGroups
C_UsersExcludeRoles
C_UsersInclude	All
C_UsersIncludeGroups
C_UsersIncludeRoles
G_BuiltInControls	compliantDevice,domainJoinedDevice
G_CustomControls
G_Operator	OR
G_TermsOfUse
M_Created	2024-08-07T15:15:35.7189561Z
M_DisplayName	CA - CCX - NICE - Require CCX Network/Devices
M_Id	627ebbbf-90c6-4ddf-a8c3-84aac1a1de22
M_Modified	2024-11-25T15:31:59.5147857Z
M_State	enabled
S_ApplicationEnforcedRestriction
S_CloudAppSecurity
S_CloudAppSecurityType
S_PersistentBrowser
S_PersistentBrowserMode
S_SignInFrequency
S_SignInFrequencyTimeframe

Property	Value
C_ApplicationsExclude
C_ApplicationsInclude	Provider Portal - MFA POC(020b856f-ddcb-4e88-8973-e413d00f96d3)
C_ApplicationsIncludeUserActions
C_ClientAppTypes	all
C_Devices
C_DeviceStates
C_LocationsExclude
C_LocationsInclude
C_PlatformsExclude
C_PlatformsInclude
C_SignInRiskLevel
C_UsersExclude
C_UsersExcludeGroups
C_UsersExcludeRoles
C_UsersInclude	All
C_UsersIncludeGroups
C_UsersIncludeRoles
G_BuiltInControls	mfa
G_CustomControls
G_Operator	OR
G_TermsOfUse
M_Created	2024-08-15T16:30:18.9291167Z
M_DisplayName	CA - CCX - Provider Portal POC - Require MFA
M_Id	7a87172e-5624-4e93-be26-05bb4aa6601f
M_Modified
M_State	enabled
S_ApplicationEnforcedRestriction
S_CloudAppSecurity
S_CloudAppSecurityType
S_PersistentBrowser
S_PersistentBrowserMode
S_SignInFrequency
S_SignInFrequencyTimeframe

Property	Value
C_ApplicationsExclude
C_ApplicationsInclude	Bitwarden SSO(1d934c2c-7c12-4e4a-8616-3dc5eb09c555)
C_ApplicationsIncludeUserActions
C_ClientAppTypes	all
C_Devices
C_DeviceStates
C_LocationsExclude	0e8b6659-0af2-4ead-bf4d-fc7a69efe298
C_LocationsInclude	All
C_PlatformsExclude
C_PlatformsInclude
C_SignInRiskLevel
C_UsersExclude
C_UsersExcludeGroups
C_UsersExcludeRoles
C_UsersInclude
C_UsersIncludeGroups	R_Bitwarden_Login_SSO
C_UsersIncludeRoles
G_BuiltInControls	mfa,compliantDevice
G_CustomControls
G_Operator	AND
G_TermsOfUse
M_Created	2024-09-05T14:44:16.5552184Z
M_DisplayName	CA - CCX - Bitwarden - Require MFA and CCX Device
M_Id	60fa8cf3-5317-4694-ace3-2f6e9d8b0764
M_Modified	2024-11-12T19:19:04.479096Z
M_State	enabled
S_ApplicationEnforcedRestriction
S_CloudAppSecurity
S_CloudAppSecurityType
S_PersistentBrowser
S_PersistentBrowserMode
S_SignInFrequency	True
S_SignInFrequencyTimeframe	1 hours

Property	Value
C_ApplicationsExclude
C_ApplicationsInclude	Proofpoint on Demand(dbbf6b93-d68e-4f8d-9dab-a028b0e49a57)
C_ApplicationsIncludeUserActions
C_ClientAppTypes	all
C_Devices
C_DeviceStates
C_LocationsExclude
C_LocationsInclude
C_PlatformsExclude
C_PlatformsInclude
C_SignInRiskLevel
C_UsersExclude
C_UsersExcludeGroups
C_UsersExcludeRoles
C_UsersInclude	All
C_UsersIncludeGroups
C_UsersIncludeRoles
G_BuiltInControls	mfa
G_CustomControls
G_Operator	OR
G_TermsOfUse
M_Created	2024-09-24T15:44:39.2994353Z
M_DisplayName	CA - CCX - Proofpoint on Demand - Require MFA
M_Id	86a2cac6-466d-4cfe-aa61-a3a4f73456d9
M_Modified
M_State	enabled
S_ApplicationEnforcedRestriction
S_CloudAppSecurity
S_CloudAppSecurityType
S_PersistentBrowser
S_PersistentBrowserMode
S_SignInFrequency
S_SignInFrequencyTimeframe

Property	Value
C_ApplicationsExclude
C_ApplicationsInclude	Proofpoint Admin Portal (POD)(5144935d-66fb-4662-ae74-0e62d4c44d7d)
C_ApplicationsIncludeUserActions
C_ClientAppTypes	all
C_Devices
C_DeviceStates
C_LocationsExclude
C_LocationsInclude
C_PlatformsExclude
C_PlatformsInclude
C_SignInRiskLevel
C_UsersExclude
C_UsersExcludeGroups
C_UsersExcludeRoles
C_UsersInclude	All
C_UsersIncludeGroups
C_UsersIncludeRoles
G_BuiltInControls	mfa
G_CustomControls
G_Operator	OR
G_TermsOfUse
M_Created	2024-09-24T15:58:30.6132496Z
M_DisplayName	CA - CCX - Proofpoint Admin Portal - Require MFA
M_Id	3322aa63-33d1-446a-9e16-31139a3fe54e
M_Modified	2024-09-25T14:53:55.5931791Z
M_State	enabled
S_ApplicationEnforcedRestriction
S_CloudAppSecurity
S_CloudAppSecurityType
S_PersistentBrowser
S_PersistentBrowserMode
S_SignInFrequency
S_SignInFrequencyTimeframe

Property	Value
C_ApplicationsExclude
C_ApplicationsInclude	NICE EEM(402a8daa-dc65-4c18-9842-beef25f7e084) Nice WFM(d0be22d3-0d40-431b-87a6-f26654b44694)
C_ApplicationsIncludeUserActions
C_ClientAppTypes	all
C_Devices
C_DeviceStates
C_LocationsExclude	0e8b6659-0af2-4ead-bf4d-fc7a69efe298
C_LocationsInclude	All
C_PlatformsExclude	android,iOS,macOS,linux
C_PlatformsInclude	all
C_SignInRiskLevel
C_UsersExclude
C_UsersExcludeGroups
C_UsersExcludeRoles
C_UsersInclude	All
C_UsersIncludeGroups
C_UsersIncludeRoles
G_BuiltInControls	compliantDevice,domainJoinedDevice
G_CustomControls
G_Operator	OR
G_TermsOfUse
M_Created	2024-10-31T20:39:16.4989029Z
M_DisplayName	CA - CCX - NICE - Require CCX Network/Devices - WFM Reporting
M_Id	74f14456-2a20-4691-a1d0-32066032f3f8
M_Modified	2024-11-01T20:05:33.5959864Z
M_State	enabledForReportingButNotEnforced
S_ApplicationEnforcedRestriction
S_CloudAppSecurity
S_CloudAppSecurityType
S_PersistentBrowser
S_PersistentBrowserMode
S_SignInFrequency
S_SignInFrequencyTimeframe

Property	Value
C_ApplicationsExclude
C_ApplicationsInclude	All
C_ApplicationsIncludeUserActions
C_ClientAppTypes	all
C_Devices
C_DeviceStates
C_LocationsExclude
C_LocationsInclude
C_PlatformsExclude
C_PlatformsInclude
C_SignInRiskLevel
C_UsersExclude
C_UsersExcludeGroups
C_UsersExcludeRoles
C_UsersInclude	None
C_UsersIncludeGroups
C_UsersIncludeRoles
G_BuiltInControls
G_CustomControls
G_Operator
G_TermsOfUse
M_Created	2024-11-08T18:43:48.2142577Z
M_DisplayName	Block TOR & Anonymous Proxies
M_Id	19f10781-9820-4cb0-856e-13a634578895
M_Modified	2024-12-02T14:27:27.2306555Z
M_State	disabled
S_ApplicationEnforcedRestriction
S_CloudAppSecurity	True
S_CloudAppSecurityType
S_PersistentBrowser
S_PersistentBrowserMode
S_SignInFrequency
S_SignInFrequencyTimeframe

Property	Value
C_ApplicationsExclude
C_ApplicationsInclude	Bitwarden SSO(1d934c2c-7c12-4e4a-8616-3dc5eb09c555)
C_ApplicationsIncludeUserActions
C_ClientAppTypes	all
C_Devices
C_DeviceStates
C_LocationsExclude
C_LocationsInclude	0e8b6659-0af2-4ead-bf4d-fc7a69efe298
C_PlatformsExclude
C_PlatformsInclude
C_SignInRiskLevel
C_UsersExclude
C_UsersExcludeGroups
C_UsersExcludeRoles
C_UsersInclude
C_UsersIncludeGroups	R_Bitwarden_Login_SSO
C_UsersIncludeRoles
G_BuiltInControls	mfa
G_CustomControls
G_Operator	OR
G_TermsOfUse
M_Created	2024-11-12T19:17:11.9020732Z
M_DisplayName	CA - CCX - Bitwarden - Require MFA and CCX IP
M_Id	ef4467fa-d9a9-4f3f-b245-cedb5f33fa7a
M_Modified	2024-11-13T15:20:45.047139Z
M_State	enabled
S_ApplicationEnforcedRestriction
S_CloudAppSecurity
S_CloudAppSecurityType
S_PersistentBrowser
S_PersistentBrowserMode
S_SignInFrequency	True
S_SignInFrequencyTimeframe	1 hours

Property	Value
C_ApplicationsExclude
C_ApplicationsInclude	MicrosoftAdminPortals
C_ApplicationsIncludeUserActions
C_ClientAppTypes	all
C_Devices
C_DeviceStates
C_LocationsExclude
C_LocationsInclude
C_PlatformsExclude
C_PlatformsInclude
C_SignInRiskLevel
C_UsersExclude	Amason, Andrew(Andrew.Amason@carecentrix.com)
C_UsersExcludeGroups
C_UsersExcludeRoles
C_UsersInclude
C_UsersIncludeGroups
C_UsersIncludeRoles	Exchange Administrator Global Reader Intune Administrator
G_BuiltInControls	mfa
G_CustomControls
G_Operator	OR
G_TermsOfUse
M_Created	2024-11-14T20:27:14.6239241Z
M_DisplayName	Supplimental: Multifactor authentication for admins accessing Microsoft Admin Portals COPY
M_Id	45fab5d2-a2af-4ec3-ae65-4f58686b14d1
M_Modified	2025-02-24T15:01:01.3827304Z
M_State	enabled
S_ApplicationEnforcedRestriction
S_CloudAppSecurity
S_CloudAppSecurityType
S_PersistentBrowser
S_PersistentBrowserMode
S_SignInFrequency	True
S_SignInFrequencyTimeframe	2 hours

Property	Value
C_ApplicationsExclude
C_ApplicationsInclude	RemoteAssistanceService(1dee7b72-b80d-4e56-933d-8b6b04f9a3e2)
C_ApplicationsIncludeUserActions
C_ClientAppTypes	all
C_Devices
C_DeviceStates
C_LocationsExclude
C_LocationsInclude
C_PlatformsExclude
C_PlatformsInclude
C_SignInRiskLevel
C_UsersExclude
C_UsersExcludeGroups
C_UsersExcludeRoles
C_UsersInclude
C_UsersIncludeGroups	AAD_Microsoft365_Licensing_RemoteHelp
C_UsersIncludeRoles
G_BuiltInControls	mfa
G_CustomControls
G_Operator	OR
G_TermsOfUse
M_Created	2025-01-24T21:49:55.029118Z
M_DisplayName	CA - CCX - MEM - Remote Help
M_Id	5491b1de-b07d-4ad0-b35b-cd8d2041f2d2
M_Modified	2025-01-30T18:11:52.0065847Z
M_State	enabled
S_ApplicationEnforcedRestriction
S_CloudAppSecurity
S_CloudAppSecurityType
S_PersistentBrowser
S_PersistentBrowserMode
S_SignInFrequency
S_SignInFrequencyTimeframe

Property	Value
C_ApplicationsExclude
C_ApplicationsInclude	All
C_ApplicationsIncludeUserActions
C_ClientAppTypes	all
C_Devices
C_DeviceStates
C_LocationsExclude
C_LocationsInclude
C_PlatformsExclude
C_PlatformsInclude
C_SignInRiskLevel	high
C_UsersExclude
C_UsersExcludeGroups
C_UsersExcludeRoles
C_UsersInclude
C_UsersIncludeGroups	Conditional Access: Risky sign-in multifactor authentication (a4ea6c0f-b8fb-4d29-91f1-9f8cf0601e98)
C_UsersIncludeRoles
G_BuiltInControls	mfa
G_CustomControls
G_Operator	OR
G_TermsOfUse
M_Created	2025-02-13T01:38:04.1923904Z
M_DisplayName	Microsoft-managed: Multifactor authentication and reauthentication for risky sign-ins
M_Id	f501b837-3b2b-4e04-8cda-7680becf3e37
M_Modified	2025-05-14T20:02:03.06783Z
M_State	enabled
S_ApplicationEnforcedRestriction
S_CloudAppSecurity
S_CloudAppSecurityType
S_PersistentBrowser
S_PersistentBrowserMode
S_SignInFrequency	True
S_SignInFrequencyTimeframe

Property	Value
C_ApplicationsExclude
C_ApplicationsInclude	All
C_ApplicationsIncludeUserActions
C_ClientAppTypes	all
C_Devices
C_DeviceStates
C_LocationsExclude
C_LocationsInclude	00985883-fe80-46d2-aa8c-5e3aa8ebc24f
C_PlatformsExclude
C_PlatformsInclude
C_SignInRiskLevel
C_UsersExclude
C_UsersExcludeGroups
C_UsersExcludeRoles
C_UsersInclude	()
C_UsersIncludeGroups
C_UsersIncludeRoles
G_BuiltInControls	block
G_CustomControls
G_Operator	OR
G_TermsOfUse
M_Created	2025-04-02T13:03:37.3048002Z
M_DisplayName	Block VPN IP Ranges
M_Id	fdbaf0e6-f585-4984-8a5b-e3204926c6f8
M_Modified	2025-04-02T15:22:37.4138687Z
M_State	enabled
S_ApplicationEnforcedRestriction
S_CloudAppSecurity
S_CloudAppSecurityType
S_PersistentBrowser
S_PersistentBrowserMode
S_SignInFrequency
S_SignInFrequencyTimeframe

Property	Value
C_ApplicationsExclude
C_ApplicationsInclude	All
C_ApplicationsIncludeUserActions
C_ClientAppTypes	all
C_Devices
C_DeviceStates
C_LocationsExclude
C_LocationsInclude
C_PlatformsExclude
C_PlatformsInclude	windowsPhone
C_SignInRiskLevel
C_UsersExclude	Amason, Andrew(Andrew.Amason@carecentrix.com)
C_UsersExcludeGroups
C_UsersExcludeRoles
C_UsersInclude	All
C_UsersIncludeGroups
C_UsersIncludeRoles
G_BuiltInControls	block
G_CustomControls
G_Operator	OR
G_TermsOfUse
M_Created	2025-04-03T20:40:52.652171Z
M_DisplayName	CA - CCX - Global - Block Windows Phone Access
M_Id	a045b8c1-caa2-4444-8b26-d0eba0377900
M_Modified	2025-04-15T17:43:16.5472313Z
M_State	enabled
S_ApplicationEnforcedRestriction
S_CloudAppSecurity
S_CloudAppSecurityType
S_PersistentBrowser
S_PersistentBrowserMode
S_SignInFrequency
S_SignInFrequencyTimeframe

Property	Value
C_ApplicationsExclude
C_ApplicationsInclude	All
C_ApplicationsIncludeUserActions
C_ClientAppTypes	all
C_Devices
C_DeviceStates
C_LocationsExclude
C_LocationsInclude
C_PlatformsExclude
C_PlatformsInclude
C_SignInRiskLevel
C_UsersExclude
C_UsersExcludeGroups
C_UsersExcludeRoles
C_UsersInclude	All
C_UsersIncludeGroups
C_UsersIncludeRoles
G_BuiltInControls	block
G_CustomControls
G_Operator	OR
G_TermsOfUse
M_Created	2025-04-22T00:41:54.9443682Z
M_DisplayName	Microsoft-managed: Block device code flow
M_Id	b3b9b82b-165e-4b31-a1aa-adb952835e62
M_Modified	2025-04-29T15:25:01.4610866Z
M_State	enabled
S_ApplicationEnforcedRestriction
S_CloudAppSecurity
S_CloudAppSecurityType
S_PersistentBrowser
S_PersistentBrowserMode
S_SignInFrequency
S_SignInFrequencyTimeframe

Conditional Access Policies

This section contains a list of all conditional Access policies configured in Azure AD.

CA - CCX - M365 - Block Unapproved Mobile Users

Metadata

Name	Value
Created	2022-02-17T21:12:20.8304534Z
DisplayName	CA - CCX - M365 - Block Unapproved Mobile Users
Id	3e3b4744-0993-4f0b-9b85-cc7900e4d924
Modified	2024-01-25T21:34:17.1586076Z
State	enabled

Conditions

Name	Value
ApplicationsExclude
ApplicationsInclude	Office365
ApplicationsIncludeUserActions
ClientAppTypes	exchangeActiveSync,browser,mobileAppsAndDesktopClients,other
Devices
DeviceStates
LocationsExclude
LocationsInclude
PlatformsExclude
PlatformsInclude	android,iOS
SignInRiskLevel
UsersExclude
UsersExcludeGroups	R_Intune_Mobile_Access
UsersExcludeRoles
UsersInclude	All
UsersIncludeGroups
UsersIncludeRoles

Grant Controls

Name	Value
BuiltInControls	block
CustomControls
Operator	OR
TermsOfUse

Session Controls

Name	Value
ApplicationEnforcedRestriction
CloudAppSecurity
CloudAppSecurityType
PersistentBrowser
PersistentBrowserMode
SignInFrequency
SignInFrequencyTimeframe

CA - CCX - Global - Restrict Mobile Access to US

Metadata

Name	Value
Created	2022-03-22T20:23:37.3397458Z
DisplayName	CA - CCX - Global - Restrict Mobile Access to US
Id	d110337f-09ee-4ec7-97d1-173a3ba97d6e
Modified	2023-08-29T16:05:56.0085224Z
State	enabled

Conditions

Name	Value
ApplicationsExclude
ApplicationsInclude	Office365
ApplicationsIncludeUserActions
ClientAppTypes	all
Devices
DeviceStates
LocationsExclude	133e40bf-ecd0-4bcd-8d4c-434fec8df72d
LocationsInclude	All
PlatformsExclude
PlatformsInclude	android,iOS
SignInRiskLevel
UsersExclude
UsersExcludeGroups	R_Intune_Mobile_AccessR_AAD_Offshore_Access_Mobile
UsersExcludeRoles
UsersInclude	All
UsersIncludeGroups
UsersIncludeRoles

Grant Controls

Name	Value
BuiltInControls	block
CustomControls
Operator	OR
TermsOfUse

Session Controls

Name	Value
ApplicationEnforcedRestriction
CloudAppSecurity
CloudAppSecurityType
PersistentBrowser
PersistentBrowserMode
SignInFrequency
SignInFrequencyTimeframe

CA - CCX - M365 - Grant Compliance Access- MacOS

Metadata

Name	Value
Created	2022-03-31T13:54:15.2358463Z
DisplayName	CA - CCX - M365 - Grant Compliance Access- MacOS
Id	76f1d229-e04d-4490-8dc9-a6ba605b0f82
Modified	2025-05-13T12:27:21.1072702Z
State	enabled

Conditions

Name	Value
ApplicationsExclude	VMware Horizon - Unified Access Gateway(17a58be3-afbe-45c4-a4ab-4e7640c285fc)
ApplicationsInclude	All
ApplicationsIncludeUserActions
ClientAppTypes	all
Devices
DeviceStates
LocationsExclude	AllTrusted
LocationsInclude	All
PlatformsExclude
PlatformsInclude	macOS
SignInRiskLevel
UsersExclude
UsersExcludeGroups	R_Intune_Mobile_AccessR_AAD_Offshore_Access_Mobile
UsersExcludeRoles
UsersInclude	All
UsersIncludeGroups
UsersIncludeRoles

Grant Controls

Name	Value
BuiltInControls	compliantDevice
CustomControls
Operator	OR
TermsOfUse

Session Controls

Name	Value
ApplicationEnforcedRestriction
CloudAppSecurity
CloudAppSecurityType
PersistentBrowser
PersistentBrowserMode
SignInFrequency	True
SignInFrequencyTimeframe	7 days

CA - CCX - Global - Block Linux External Access

Metadata

Name	Value
Created	2022-08-09T15:32:33.3564342Z
DisplayName	CA - CCX - Global - Block Linux External Access
Id	a0463337-0645-4708-b0e5-98e5966e1f55
Modified	2025-01-03T13:36:42.5390569Z
State	enabled

Conditions

Name	Value
ApplicationsExclude	VMware Horizon - Unified Access Gateway(17a58be3-afbe-45c4-a4ab-4e7640c285fc)
ApplicationsInclude	All
ApplicationsIncludeUserActions
ClientAppTypes	all
Devices
DeviceStates
LocationsExclude	0e8b6659-0af2-4ead-bf4d-fc7a69efe298
LocationsInclude	All
PlatformsExclude
PlatformsInclude	linux
SignInRiskLevel
UsersExclude
UsersExcludeGroups	R_Intune_Mobile_AccessR_AAD_Offshore_Access_Mobile
UsersExcludeRoles
UsersInclude	All
UsersIncludeGroups
UsersIncludeRoles

Grant Controls

Name	Value
BuiltInControls	block
CustomControls
Operator	OR
TermsOfUse

Session Controls

Name	Value
ApplicationEnforcedRestriction
CloudAppSecurity
CloudAppSecurityType
PersistentBrowser
PersistentBrowserMode
SignInFrequency
SignInFrequencyTimeframe

CA - CCX - M365 - Grant Hybrid Join Access - Windows

Metadata

Name	Value
Created	2022-08-15T12:15:36.5634255Z
DisplayName	CA - CCX - M365 - Grant Hybrid Join Access - Windows
Id	59e77730-c800-4952-8708-f34b80a3267d
Modified	2025-05-12T18:32:36.5341764Z
State	enabled

Conditions

Name	Value
ApplicationsExclude
ApplicationsInclude	Adobe Identity Management (OIDC)(6aba272b-e383-44cd-8eda-34c66dfd9546) Adobe Workfront(a846bde4-f407-45ea-ad51-c0fc77a0bb16) MicrosoftAdminPortals Windows Azure Service Management API(797f4846-ba00-4fd7-ba43-dac1f8f63013) Office365
ApplicationsIncludeUserActions
ClientAppTypes	all
Devices	@{includeDeviceStates=System.Object[]; excludeDeviceStates=System.Object[]; includeDevices=System.Object[]; excludeDevices=System.Object[]; deviceFilter=}
DeviceStates
LocationsExclude	0e8b6659-0af2-4ead-bf4d-fc7a69efe298
LocationsInclude	All
PlatformsExclude
PlatformsInclude	windows
SignInRiskLevel
UsersExclude	iCIMS Candidate Tracking Service Account(iCIMSCandidate.TrackingServiceAccount@carecentrix.com)
UsersExcludeGroups	R_Intune_Mobile_AccessR_AAD_Offshore_Access_MobileAAD_MEM_Autopilot_Troubleshooting
UsersExcludeRoles
UsersInclude	All
UsersIncludeGroups
UsersIncludeRoles

Grant Controls

Name	Value
BuiltInControls	domainJoinedDevice
CustomControls
Operator	OR
TermsOfUse

Session Controls

Name	Value
ApplicationEnforcedRestriction
CloudAppSecurity
CloudAppSecurityType
PersistentBrowser
PersistentBrowserMode
SignInFrequency	True
SignInFrequencyTimeframe	10 days

CA - CCX - PAGlobalProtect - Require MFA

Metadata

Name	Value
Created	2022-09-02T13:29:38.5885644Z
DisplayName	CA - CCX - PAGlobalProtect - Require MFA
Id	64f6402e-fc9d-4fcb-bffc-8a7fe2b433c9
Modified	2023-03-21T20:08:34.4480472Z
State	enabled

Conditions

Name	Value
ApplicationsExclude
ApplicationsInclude	Palo Alto Networks - GlobalProtect(96c5df68-2489-4cd6-9f01-a25a1ebd5071)
ApplicationsIncludeUserActions
ClientAppTypes	all
Devices
DeviceStates
LocationsExclude
LocationsInclude
PlatformsExclude
PlatformsInclude
SignInRiskLevel
UsersExclude
UsersExcludeGroups	R_Intune_Mobile_AccessR_AAD_Offshore_Access_MobileAAD_MEM_Autopilot_Troubleshooting
UsersExcludeRoles
UsersInclude	All
UsersIncludeGroups
UsersIncludeRoles

Grant Controls

Name	Value
BuiltInControls	mfa
CustomControls
Operator	OR
TermsOfUse

Session Controls