How to get all data related to Entra ID Conditional access Policy

Question

Hello All,

How to get all data related to Entra ID Conditional access Policy

I tried Get-AzureADMSConditionalAccessPolicy | FL

And it has given me this output,

Id : ce4c0f55-6554-47c4-9527-9429cdaa4ca8

DisplayName : MFA_Policy

State : disabled

Conditions : class ConditionalAccessConditionSet {

              **Applications: class ConditionalAccessApplicationCondition {**

              **IncludeApplications: System.Collections.Generic.List`1[System.String]**

              **ExcludeApplications: System.Collections.Generic.List`1[System.String]**

              **IncludeUserActions: System.Collections.Generic.List`1[System.String]**

              **IncludeProtectionLevels:**

            **}**

              **Users: class ConditionalAccessUserCondition {**

              **IncludeUsers: System.Collections.Generic.List`1[System.String]**

              **ExcludeUsers: System.Collections.Generic.List`1[System.String]**

              **IncludeGroups: System.Collections.Generic.List`1[System.String]**

              **ExcludeGroups: System.Collections.Generic.List`1[System.String]**

              **IncludeRoles: System.Collections.Generic.List`1[System.String]**

              **ExcludeRoles: System.Collections.Generic.List`1[System.String]**

            **}**

              **Platforms: class ConditionalAccessPlatformCondition {**

              **IncludePlatforms: System.Collections.Generic.List`1[Microsoft.Open.MSGraph.Model.ConditionalAccessDevicePlatforms]**

              **ExcludePlatforms: System.Collections.Generic.List`1[Microsoft.Open.MSGraph.Model.ConditionalAccessDevicePlatforms]**

            **}**

              **Locations: class ConditionalAccessLocationCondition {**

              **IncludeLocations: System.Collections.Generic.List`1[System.String]**

              **ExcludeLocations: System.Collections.Generic.List`1[System.String]**

            **}**

              **SignInRiskLevels: System.Collections.Generic.List`1[Microsoft.Open.MSGraph.Model.ConditionalAccessRiskLevel]**

              **ClientAppTypes: System.Collections.Generic.List`1[Microsoft.Open.MSGraph.Model.ConditionalAccessClientApp]**

            **}**

GrantControls : class ConditionalAccessGrantControls {

              **_Operator: OR**

              **BuiltInControls: System.Collections.Generic.List`1[Microsoft.Open.MSGraph.Model.ConditionalAccessGrantControl]**

              **CustomAuthenticationFactors: System.Collections.Generic.List`1[System.String]**

              **TermsOfUse: System.Collections.Generic.List`1[System.String]**

            **}**

Please suggest is there any chance to get the conditions in details using PowerShell or by using any other alternate.

Answer 1

Hello @Mani,

Thank you for posting your query on Microsoft Q&A.

Adding to Andy David - MVP answer. You can refer to the document which will only focus on exporting Conditional Access policies using PowerShell commands:

https://www.alitajran.com/export-conditional-access-policies/

I hope this information is helpful. Please feel free to reach out if you have any further questions.

Answer 2

HI, this doc has some examples:

https://practical365.com/conditional-access-policies-powershell/