Public/Configuration/Baseline/ConditionalAccessPolicies/JyskIT-Baseline-CA-RequireMFAAdmins.json

{
    "conditions": {
      "applications": {
        "includeApplications": [
          "All"
        ]
      },
      "locations": {
        "includeLocations": [
          "All"
        ],
        "excludeLocations": [
          "#ReplaceNamedLocation#_Jysk IT"
        ]
      },
      "users": {
        "includeGroups": [
          "#ReplaceGroup#_JyskIT-Baseline-Administrators"
        ],
        "includeRoles": [
          "62e90394-69f5-4237-9190-012177145e10",
          "194ae4cb-b126-40b2-bd5b-6091b380977d",
          "f28a1f50-f6e7-4571-818b-6a12f2af6b6c",
          "29232cdf-9323-42fd-ade2-1d097af3e4de",
          "b1be1c3e-b65d-4f19-8427-f6fa0d97feb9",
          "729827e3-9c14-49f7-bb1b-9608f156bbb8",
          "b0f54661-2d74-4c50-afa3-1ec803f12efe",
          "fe930be7-5e62-47db-91af-98c3a49a38b1",
          "c4e39bd9-1100-46d3-8c65-fb160da0071f",
          "9b895d92-2cd3-44c7-9d02-a6ac2d5ea5c3",
          "158c047a-c907-4556-b7ef-446551a6b5f7",
          "966707d0-3269-4727-9be2-8c3a10f19b9d",
          "4ba39ca4-527c-499a-b93d-d9b492c50246",
          "e00e864a-17c5-4a4b-9c06-f5b95a8d5bd8",
          "7be44c8a-adaf-4e2a-84d6-ab2649e08a13",
          "e8611ab8-c189-46e8-94e1-60213ab1f814"
        ]
      }
    },
    "displayName": "JyskIT-Baseline-CA-RequireMFAAdmins",
    "description": "Require MFA for all administrators.",
    "grantControls": {
      "operator": "OR",
      "authenticationStrength": {
        "id": "#ReplaceAuthenticationStrength#_Jysk IT - MFA Methods"
      }
    },
    "state": "enabledForReportingButNotEnforced"
  }