SOLVED

Unable to modify Conditional Access Policies

%3CLINGO-SUB%20id%3D%22lingo-sub-654200%22%20slang%3D%22en-US%22%3EUnable%20to%20modify%20Conditional%20Access%20Policies%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-654200%22%20slang%3D%22en-US%22%3E%3CP%3ESo%20we%20have%20O365%2C%20and%20the%20%22free%22%20Azure%20which%20comes%20with%20it.%3C%2FP%3E%3CP%3EI%20think%20a%20colleague%20previously%20signed%20up%20for%20Enterprise%20Mobility%20%26amp%3B%20Security%20Trial%20for%20our%20tenancy%2C%20and%20configured%20some%20Azure%20Conditional%20Access%20policies.%20(See%20below)%3C%2FP%3E%3CP%3E%3CSPAN%20class%3D%22lia-inline-image-display-wrapper%20lia-image-align-inline%22%20style%3D%22width%3A%20872px%3B%22%3E%3CIMG%20src%3D%22https%3A%2F%2Fgxcuf89792.i.lithium.com%2Ft5%2Fimage%2Fserverpage%2Fimage-id%2F116378i07DB82054B9D83DB%2Fimage-size%2Flarge%3Fv%3D1.0%26amp%3Bpx%3D999%22%20alt%3D%22Policies.png%22%20title%3D%22Policies.png%22%20%2F%3E%3C%2FSPAN%3E%3C%2FP%3E%3CP%3ESo%20as%20you%20can%20see%20we%20have%20one%20of%20the%20Baseline%20Policies%20enabled%2C%20and%202%20more%20custom%20ones.%3C%2FP%3E%3CP%3EBut%20when%20i%20click%20them%20to%20edit%2Fview%20what%20settings%20are%20in%20them%20i%20get%20the%20following%3C%2FP%3E%3CP%3E%3CSPAN%20class%3D%22lia-inline-image-display-wrapper%20lia-image-align-inline%22%20style%3D%22width%3A%20576px%3B%22%3E%3CIMG%20src%3D%22https%3A%2F%2Fgxcuf89792.i.lithium.com%2Ft5%2Fimage%2Fserverpage%2Fimage-id%2F116379i59628E3BE472F55B%2Fimage-size%2Flarge%3Fv%3D1.0%26amp%3Bpx%3D999%22%20alt%3D%22Edit.png%22%20title%3D%22Edit.png%22%20%2F%3E%3C%2FSPAN%3E%3C%2FP%3E%3CP%3ESo%20it%20seems%20the%20only%20option%20i%20have%20is%20to%20Delete%20the%20policy%2C%20but...i%20have%20no%20way%20of%20knowing%20what%20impact%20this%20will%20have.%3C%2FP%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3CP%3EHow%20can%20i%20end%20up%20with%20a%20policy%20i%20can't%20edit%3F%26nbsp%3B%20Is%20it%20due%20to%20that%20trial%20of%20Enterprise%20Mobility%20%26amp%3B%20Security%3F%3C%2FP%3E%3CP%3EIs%20there%20ANYWAY%20i%20can%20see%20the%20settings%20in%20this%20policy%20before%20i%20delete%20it.%3C%2FP%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3CP%3EThanks%3C%2FP%3E%3C%2FLINGO-BODY%3E%3CLINGO-LABS%20id%3D%22lingo-labs-654200%22%20slang%3D%22en-US%22%3E%3CLINGO-LABEL%3EAzure%3C%2FLINGO-LABEL%3E%3CLINGO-LABEL%3ESecurity%20%26amp%3B%20Compliance%3C%2FLINGO-LABEL%3E%3C%2FLINGO-LABS%3E%3CLINGO-SUB%20id%3D%22lingo-sub-654562%22%20slang%3D%22en-US%22%3ERe%3A%20Unable%20to%20modify%20Conditional%20Access%20Policies%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-654562%22%20slang%3D%22en-US%22%3EIf%20you%20sign%20up%20to%20the%20free%20trial%20of%20Azure%20AD%20Premium%2C%20you%20will%20be%20able%20to%20see%20it.%20Just%20make%20sure%20you%20disable%20the%20trail%20after%20you%20have%20finished.%3CBR%20%2F%3E%3CBR%20%2F%3EYou%20could%20ask%20your%20colleague%20what%20they%20set%20up%20also.%20from%20there%20you%20should%20be%20able%20to%20figure%20out%20what%20impact%20deleting%20them%20might%20have.%3CBR%20%2F%3E%3CBR%20%2F%3EHope%20that%20helps.%3C%2FLINGO-BODY%3E%3CLINGO-SUB%20id%3D%22lingo-sub-657059%22%20slang%3D%22en-US%22%3ERe%3A%20Unable%20to%20modify%20Conditional%20Access%20Policies%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-657059%22%20slang%3D%22en-US%22%3E%3CP%3E%3CA%20href%3D%22https%3A%2F%2Ftechcommunity.microsoft.com%2Ft5%2Fuser%2Fviewprofilepage%2Fuser-id%2F50205%22%20target%3D%22_blank%22%3E%40Richard%20Hooper%3C%2FA%3E%26nbsp%3BBingo!%3C%2FP%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3CP%3ESigned%20up%20for%20a%20P2%20trial%2C%20and%20i%20can%20see%20the%20config%20of%20the%20policies.%3C%2FP%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3CP%3ENow%20yes%20i%20agree%20we%20should%20of%20checked%20what%20was%20set%20before%20the%20original%20trial%20expired%2C%20but%20surely%20thats%20a%20bit%20of%20a%20bug%20that%20i%20can%20have%20policies%20set%2C%20and%20not%20be%20able%20to%20see%20what%20settings%20are%20in%20them%3F%3C%2FP%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3CP%3EAnyways%20i'm%20gonna%20play%20with%20the%20configs%20to%20see%20what%20impact%20happens%20when%20i%20remove%20them%2C%20then%20maybe%20fully%20delete%20them%20before%20the%20P2%20trial%20expires.%3C%2FP%3E%3CP%3EThanks%3C%2FP%3E%3C%2FLINGO-BODY%3E
New Contributor

So we have O365, and the "free" Azure which comes with it.

I think a colleague previously signed up for Enterprise Mobility & Security Trial for our tenancy, and configured some Azure Conditional Access policies. (See below)

Policies.png

So as you can see we have one of the Baseline Policies enabled, and 2 more custom ones.

But when i click them to edit/view what settings are in them i get the following

Edit.png

So it seems the only option i have is to Delete the policy, but...i have no way of knowing what impact this will have.

 

How can i end up with a policy i can't edit?  Is it due to that trial of Enterprise Mobility & Security?

Is there ANYWAY i can see the settings in this policy before i delete it.

 

Thanks

2 Replies
best response confirmed by johnsmith876 (New Contributor)
Solution
If you sign up to the free trial of Azure AD Premium, you will be able to see it. Just make sure you disable the trail after you have finished.

You could ask your colleague what they set up also. from there you should be able to figure out what impact deleting them might have.

Hope that helps.

@Richard Hooper Bingo!

 

Signed up for a P2 trial, and i can see the config of the policies.

 

Now yes i agree we should of checked what was set before the original trial expired, but surely thats a bit of a bug that i can have policies set, and not be able to see what settings are in them?

 

Anyways i'm gonna play with the configs to see what impact happens when i remove them, then maybe fully delete them before the P2 trial expires.

Thanks