Forum Discussion

StuartK73's avatar
StuartK73
Iron Contributor
Nov 04, 2024

Microsoft Graph Command Line Tools Blocked by CA

Hi All   I hope you are well.   Anyway, I recently turned ON a Conditional Access Policy Template, "Require MDM-enrolled and compliant device to access cloud apps for all users (Preview)" this se...
Conditional Access
Graph API
Intune
SebastiaanSmits's avatar
SebastiaanSmits
Iron Contributor
Nov 06, 2024

How we deal with this is by excluding Microsoft Graph Command Line Tools in your CA Policy in the Target Resource section in the Policy.

After this you can restrict it's use by going to Entra ID portal > Enterprise Application > find the Microsoft Graph Command Line Tools > go to properties > and configure 'Assignment required'. Now only explicitly assigned users can use the App.

  • Bohdan90210's avatar
    Bohdan90210
    Copper Contributor
    Jan 24, 2025

    excluding Microsoft Graph Command Line Tools in the CA doesn't change anything. It keeps getting blocked by CA despite the exclusion

    • StuartK73's avatar
      StuartK73
      Iron Contributor
      Jan 28, 2025

      Yes, that's exactly what we are still experiencing I'm afraid.

  • StuartK73's avatar
    StuartK73
    Iron Contributor
    Nov 11, 2024

    Hi Buddy

    I don't see Microsoft Graph Command Line Tools listed but did see MS Graph PowerShell, is this the same thing?

     

    Info appreciated

  • StuartK73's avatar
    StuartK73
    Iron Contributor
    Nov 07, 2024

    This looks promising, I'll test it, thank you.

Resources