Listing: Conditional Access per PowerShell – MFA für Admins erzwingen

$params = @{
displayName = "CA001 - MFA für Admins"
state = "enabledForReportingButNotEnforced"
conditions = @{
users = @{
includeRoles = @(
"62e90394-69f5-4237-9190-
012177145e10" # Global Admin
"194ae4cb-b126-40b2-bd5b-
6091b380977d" # Security Admin
"f28a1f50-f6e7-4571-818b-
6a12f2af6b6c" # SharePoint Admin
)
}
applications = @{
includeApplications = @("All")
}
}
grantControls = @{
operator = "OR"
builtInControls = @("mfa")
}
}
New-MgIdentityConditionalAccessPolicy
-BodyParameter $params