Forum Discussion
mohammadalkhateeb
May 09, 2022Copper Contributor
MFA admin policy and user policy
Hello there, I have a question about MFA all user policy and admin roles policy. I am actually not sure what is the best way to configure those policies, should I create all user policy with t...
mikhailf
Steel Contributor
Hello Mohammad,
So you have users who are regular, but they can elevate their permissions.
And when they are regular users with regular permissions they do not have MFA.
If the above is correct, so yes, you should include them in your "All user policy".
If you open the Conditional Access tab, there is a "What if" tool in the upper bar. Use it to test your users and review what policies are applied to them. More information here: What If tool
mohammadalkhateeb
May 09, 2022Copper Contributor
I completely forgot the whatif tool, apologies.
Thanks a lot for the help, much appreciate it
Thanks a lot for the help, much appreciate it