Description:
Verifies that at least one Conditional Access policy is configured to require compliant or Entra hybrid joined devices for admins.
Why:
Microsoft recommends requiring device compliance for privileged role admins.
Configured: At least one Conditional Access policy is configured to require compliant or Entra hybrid joined devices for admins.
Not Configured: No conditional access policy is configured to require compliant or Entra hybrid joined devices for admins.
Scoring: Contributes up to 1 point to the Posture Recommendations score.
Category: Identity
Microsoft Licensing: Requires Premium (P1) licensing
Remediation in Augmentt: Conditional Access Policy manager
Compliance Frameworks: None mapped for this check.
Microsoft documentation: