Baseline/CA104-Admins-IdentityProtection-AllApps-AnyPlatform-ContinuousAccessEvaluation.json

{
  "state": "enabled",
  "state@odata.type": "#microsoft.graph.conditionalAccessPolicyState",
  "grantControls": {
    "@odata.type": "#microsoft.graph.conditionalAccessGrantControls",
    "operator": "OR",
    "builtInControls": [
      "requireCompliantDevice"
    ]
  },
  "sessionControls": {
    "continuousAccessEvaluation": {
      "@odata.type": "#microsoft.graph.continuousAccessEvaluationSessionControl",
      "mode@odata.type": "#microsoft.graph.continuousAccessEvaluationMode",
      "mode": "strictLocation"
    },
    "@odata.type": "#microsoft.graph.conditionalAccessSessionControls"
  },
  "conditions": {
    "users": {
      "excludeRoles@odata.type": "#Collection(String)",
      "@odata.type": "#microsoft.graph.conditionalAccessUsers",
      "excludeUsers@odata.type": "#Collection(String)",
      "includeUsers@odata.type": "#Collection(String)",
      "includeGroups@odata.type": "#Collection(String)",
      "excludeGroups@odata.type": "#Collection(String)",
      "includeRoles@odata.type": "#Collection(String)",
      "includeUsers": [
        "All"
      ],
      "includeRoles": []
    },
    "userRiskLevels@odata.type": "#Collection(microsoft.graph.riskLevel)",
    "signInRiskLevels@odata.type": "#Collection(microsoft.graph.riskLevel)",
    "applications": {
      "includeAuthenticationContextClassReferences@odata.type": "#Collection(String)",
      "@odata.type": "#microsoft.graph.conditionalAccessApplications",
      "excludeApplications@odata.type": "#Collection(String)",
      "includeApplications": [
        "All"
      ],
      "includeUserActions@odata.type": "#Collection(String)",
      "includeApplications@odata.type": "#Collection(String)"
    },
    "@odata.type": "#microsoft.graph.conditionalAccessConditionSet",
    "clientAppTypes": [
      "all"
    ],
    "clientAppTypes@odata.type": "#Collection(microsoft.graph.conditionalAccessClientApp)"
  },
  "displayName": "CA104-Admins-IdentityProtection-AllApps-AnyPlatform-ContinuousAccessEvaluation",
  "modifiedDateTime@odata.type": "#DateTimeOffset",
  "createdDateTime@odata.type": "#DateTimeOffset",
  "@odata.type": "#microsoft.graph.conditionalAccessPolicy"
}