Public/Configuration/Baseline/ConditionalAccessPolicies/JyskIT-Baseline-CA-RequireAppProtectionPolicy.json

{
    "conditions": {
      "applications": {
        "includeApplications": [
          "All"
        ]
      },
      "platforms": {
        "includePlatforms": [
          "android",
          "iOS"
        ]
      },
      "clientAppTypes": [
        "all"
      ],
      "users": {
        "excludeGroups": [
          "#ReplaceGroup#_JyskIT-Baseline-CA-RequireAppProtectionPolicy_Exclude"
        ],
        "includeUsers": [
          "All"
        ]
      }
    },
    "displayName": "JyskIT-Baseline-CA-RequireAppProtectionPolicy",
    "description": "Require app protection policy for all users on Android and iOS.",
    "grantControls": {
      "operator": "OR",
      "builtInControls": [
        "compliantApplication"
      ]
    },
    "state": "enabledForReportingButNotEnforced"
  }