Description:
Verifies that all enabled Conditional Access policies exclude emergency/break glass account or group.
Why:
All conditional Access policies should exclude break glass accounts to avoid getting locked out from a tenant.
Configured: All enabled Conditional Access policies exclude emergency/break glass account or group.
Not Configured: Conditional Access policy does not exclude emergency/break glass account or group.
Scoring: Contributes up to 1 point to the Posture Recommendations score.
Category: Identity
Microsoft Licensing: Requires Premium (P1) licensing
Remediation in Augmentt: No in-product remediation — remediate in the Microsoft admin portals.
Compliance Frameworks: None mapped for this check.
Microsoft documentation: