Edit

Share via

conditionalAccessConditionSet resource type

Namespace: microsoft.graph

Represents the type of conditions that govern when the policy applies.

Properties

Property Type Description
applications conditionalAccessApplications Applications and user actions included in and excluded from the policy. Required.
authenticationFlows conditionalAccessAuthenticationFlows Authentication flows included in the policy scope.
clientApplications conditionalAccessClientApplications Client applications (service principals and workload identities) included in and excluded from the policy. Either users or clientApplications is required.
clientAppTypes conditionalAccessClientApp collection Client application types included in the policy. Possible values are: all, browser, mobileAppsAndDesktopClients, exchangeActiveSync, easSupported, other. Required.

The easUnsupported enumeration member will be deprecated in favor of exchangeActiveSync, which includes EAS supported and unsupported platforms.
devices conditionalAccessDevices Devices in the policy.
locations conditionalAccessLocations Locations included in and excluded from the policy.
platforms conditionalAccessPlatforms Platforms included in and excluded from the policy.
servicePrincipalRiskLevels riskLevel collection Service principal risk levels included in the policy. Possible values are: low, medium, high, none, unknownFutureValue.
signInRiskLevels riskLevel collection Sign-in risk levels included in the policy. Possible values are: low, medium, high, hidden, none, unknownFutureValue. Required.
userRiskLevels riskLevel collection User risk levels included in the policy. Possible values are: low, medium, high, hidden, none, unknownFutureValue. Required.
users conditionalAccessUsers Users, groups, and roles included in and excluded from the policy. Either users or clientApplications is required.
insiderRiskLevels conditionalAccessInsiderRiskLevels Insider risk levels included in the policy. The possible values are: minor, moderate, elevated, unknownFutureValue.

Relationships

None.

JSON representation

The following JSON representation shows the resource type.

{
  "@odata.type": "#microsoft.graph.conditionalAccessConditionSet",
  "applications": {"@odata.type": "microsoft.graph.conditionalAccessApplications"},
  "clientApplications": {"@odata.type": "microsoft.graph.conditionalAccessClientApplications"},
  "clientAppTypes": ["String"],
  "devices": {"@odata.type": "microsoft.graph.conditionalAccessDevices"},
  "locations": {"@odata.type": "microsoft.graph.conditionalAccessLocations"},
  "platforms": {"@odata.type": "microsoft.graph.conditionalAccessPlatforms"},
  "servicePrincipalRiskLevels": ["String"],
  "signInRiskLevels": ["String"],
  "userRiskLevels": ["String"],
  "users": {"@odata.type": "microsoft.graph.conditionalAccessUsers"},
  "insiderRiskLevels": "String",
  "authenticationFlows": {"@odata.type": "microsoft.graph.conditionalAccessAuthenticationFlows"}
}