Tag: Conditional Access
-
Conditional Access Filters With Custom Security Attributes: Target Apps, Not App Lists
Every Conditional Access policy that targets “Select resources” starts life with a tidy list of three apps. Two years later it has forty, nobody knows why the HR app is in there, and the new payroll system isn’t. You know the one. The Conditional Access filter for applications fixes that. Instead of adding apps to […]
-
Entra License Usage: Finally Find Out Who’s Using the P1 and P2 You Pay For
Entra license usage report tested: how it counts P1 and P2 usage, guest users and the 50,000 figure, plus a PowerShell check against your sign-in logs.
-
Restrict Access to Microsoft Entra Admin Center: The Toggle That Locks Nothing
If you want to control Microsoft Entra admin center access for non-admins, the Restrict access to Microsoft Entra admin center setting looks like the obvious answer. Flip it to Yes and non-admins can no longer poke around your directory. Job done, kettle on. Except Microsoft’s own documentation says, in a caution box, that it is […]
-
Microsoft Entra Terms of Use: Because ‘I Emailed Everyone the Policy’ Isn’t Evidence
How to set up Microsoft Entra Terms of Use with Conditional Access: licensing, expiry, versions, guests, reporting and the gotchas, using my lab tenant.
-
Break Glass Account: Because ‘I’ll Just Ring Microsoft’ Isn’t a Recovery Plan
A break glass account gets you back in when Conditional Access locks everyone out. Here is how to set one up properly in 2026, with passkeys, alerts and regular testing.