Introduction #
Require privileged administrators to only access resources when using a compliant or hybrid Azure AD joined device.
Basics #
Template Category: Devices
Assignments #
Users and Groups
| Includes Directory Roles | – Global administrator – Application administrator – Authentication administrator – Billing administrator – Cloud application administrator – Conditional Access administrator – Exchange administrator – Helpdesk administrator – Password administrator – Privileged authentication administrator – Privileged role administrator – Security administrator – SharePoint administrator – User administrator |
| Excluded | – None |
Cloud Apps or actions
| Cloud Apps | – All Apps |
Conditions #
Access Controls
| Grant | – Require device to be marked as compliant Or – Require hybrid Azure AD joined device |
