maester-tests/Maester/GlobalSecureAccess/Test-MtGsaCompliantNetworkBreakGlassExcluded.Tests.ps1

Describe "Maester/Entra" -Tag "Maester", "Entra", "CA" {
    It "MT.1191: Break-glass accounts should be excluded from the Compliant Network Conditional Access policy. See https://maester.dev/docs/tests/MT.1191" -Tag "MT.1191", "Preview" {
        $result = Test-MtGsaCompliantNetworkBreakGlassExcluded

        if ($null -ne $result) {
            $result | Should -Be $true -Because "a Compliant Network block policy must never lock out emergency access accounts."
        }
    }
}