conditional-access

What the Engine publishes

Generated from the Engine's capability manifest at1.0.0b6@b4bf9c325233. No value on this panel is maintained by this site.

Answers

the Conditional Access policies, named locations and Security Defaults state of one tenant

Collector

Microsoft Graph · mode ConditionalAccess

Reads

• GET /v1.0/identity/conditionalAccess/policies
• GET /v1.0/identity/conditionalAccess/namedLocations
• GET /v1.0/policies/identitySecurityDefaultsEnforcementPolicy

Least privilege

• Policy.Read.All

Produces

entra ·conditional-access-policy

Proven against a tenant

provider live-validated, slice not live-validated

Rules that decide from it

No rule reads this evidence, and that is a recorded decision rather than a gap: the access-policy inventory in a report, and any viewer is what consumes it. A threshold invented for a surface Microsoft publishes no position on would make a pass mean nothing.

Contracts it produces

• collection 1.0.0
• evidence 1.2.0
• evidence 2.0.0
• evidence 3.0.0

Every collection writes evidence and an account of itself. The manifest publishes no narrower per-capability list, so this states what it does establish rather than guessing at more.