Policies/NSP-BASE-GEO-01.psd1
|
@{ Id = 'NSP-BASE-GEO-01' Name = 'Block access from outside the home country' Version = 2 Description = 'Blocks every user except breakglass from signing in outside the tenant home country. Travel groups are excluded once their travel policy is On (TravelGroups:Enforced), so a traveler is never without a country restriction.' Notes = 'Converted from Legacy/Policies/BASE_OnlyAllowAccessFromUSA.ps1. The legacy file hard-coded US; the home country now comes from the tenant profile.' LegacyNames = @('Only Allow Access from USA', 'Allow Access - ONLY USA') DefaultState = 'reportOnly' Users = @{ IncludeUsers = @('All') ExcludeUsers = @('{BreakGlass}', '{ServiceAccounts}') ExcludeGroups = @('{TravelGroups:Enforced}') } Applications = @{ Include = @('All') } Locations = @{ Include = @('All') Exclude = @('{Country:Home}') } Grant = @{ Operator = 'OR' BuiltInControls = @('block') } } |