KQL Search

Query Details

Existing Conditional Access Policies

Query

//Display the existing Conditional Access Policies

SigninLogs
| mv-expand ConditionalAccessPolicies
| project DisplayName = tostring(ConditionalAccessPolicies.displayName),ID = tostring(ConditionalAccessPolicies.id)
| distinct ID,DisplayName
| order by DisplayName asc

Explanation

This query retrieves and displays the existing Conditional Access Policies. It expands the ConditionalAccessPolicies field, selects the display name and ID, removes duplicates, and orders the results alphabetically by display name.

Details

Rod Trent profile picture

Rod Trent

Released: October 8, 2020

Tables

SigninLogs

Keywords

ConditionalAccessPoliciesSigninLogsDisplayNameID

Operators

mv-expandprojectdistinctorder by

Actions

GitHub