Conditional access unavailable on Microsoft Entra

PonteFinal 0 Reputation points
2025-03-11T15:36:50.1866667+00:00

Months ago i've exluded a user from a policy on Security | Authentication Methods | Policies | Security | Conditional Access | Policies | Require MFA for internal users (admins not included) - Basic

Now i need to exclude another user but all the field are greyed and i cannot exlude new users from policy neither remove the excluded ones.

Microsoft Entra ID
Microsoft Entra ID
A Microsoft Entra identity service that provides identity management and access control capabilities. Replaces Azure Active Directory.
23,630 questions
{count} votes

1 answer

Sort by: Most helpful
  1. Goutam Pratti 2,070 Reputation points Microsoft External Staff
    2025-03-12T09:57:00.03+00:00

    Hello @PonteFinal ,

    I Understand that your Conditional Access is unavailable on Microsoft EntraID due to that you are not able to add and remove users from a policy.

    Please check withthe Below Conditions:

    1. Make sure you have a working Microsoft Entra tenant with Microsoft Entra ID P1, P2, or trial license enabled. If needed, create one for free.
      If you check under Microsoft Entra ID > Licenses > All products , you can confirm which licenses are available for your tenant and whether you have the correct number available.
      Also If you check under Microsoft Entra ID > Licenses > Licensed features, you can confirm whether Conditional Access should be available for your tenant or not.
      User's image
    2. Ensure that your account has the necessary permissions to modify Conditional Access policy which you have created. To Modify or Create Conditional Access you need Conditional Access Administrator or Global Administrator.

    For Additional information follow: Prerequisites , Conditional-Access-Policies

    Hope this helps. Do let us know if you any further queries.


    If this answers your query, do click Accept Answer and Yes for was this answer helpful. And, if you have any further query do let us know.


Your answer

Answers can be marked as Accepted Answers by the question author, which helps users to know the answer solved the author's problem.