Conditional Access | Monitoring (Preview)

[eliekarkafy]

A great dashboard that summarizes the sign-ins by Conditional Access result:

Total sign-ins
Access granted - Policy controls applied
Access granted - No policy controls applied

Access denied - Controls applied
Access granted - No Policy applied

[#2]

@eliekarkafy 

This will grow to be a useful tool.

What exactly does 'Access granted - No Policy applied'  mean?

[#3]

Means that a user accessed a cloud app, and no policy is controlling this access, then you need to check the security recommendations section to mitigate that risk.

[#4]

Much needed view and report for security admins to look at the overall posture

[#5]

@eliekarkafy
what is the meaning of:
Access granted - Policy controls applied
Access granted - No policy controls applied
Access denied - Controls applied
Access granted - No Policy applied

[#6]

@MauroB875 I will give example for each one below

Access granted - Policy controls applied (you have CA that grant access, but you need to verify the access controls for example require MFA to access O365)
Access granted - No policy controls applied (you have CA that grant access but don't have Access control, for example you don't have to validate MFA to access O365 but require for example a certain condition set in the CA)
Access denied - Controls applied (you have CA that block access because you didn't verify the access control)
Access granted - No Policy applied (no CA applied when you're accessing a certain target resource)