Azure AD: Complete List of Conditional Access Policies and Excluded Users
submitted
D
David Chapman
This metric will return a complete list of Azure AD Conditional Access policies and a list of excluded users for each policy. This is difficult because the policies only contain a list of user's ID, not their display names.
Policies.ConditionalAccess[].{ca_displayName: displayName, user_displayName: join(', ', map_by_key(conditions.users.excludeUsers[].{id: @}, ~.Users[],
id
)[].displayName)}[].join(': ', [ca_displayName, to_string(user_displayName)])N
Noah Tatum
Thanks for this! I took this and ran with it to add the ability to grab the users from any excluded groups as well. My metric is "Azure Active Directory: Conditional Access Policies with Excluded Users Summary"