Edit

Share via

conditionalAccessApplications resource type

Namespace: microsoft.graph

Important

APIs under the /beta version in Microsoft Graph are subject to change. Use of these APIs in production applications is not supported. To determine whether an API is available in v1.0, use the Version selector.

Represents the applications and user actions included in and excluded from the conditional access policy.

Properties

Property Type Description
applicationFilter conditionalAccessFilter Filter that defines the dynamic-application-syntax rule to include/exclude cloud applications. A filter can use custom security attributes to include/exclude applications.
excludeApplications String collection Can be one of the following:
  • The list of client IDs (appId) explicitly excluded from the policy.
  • Office365 - For the list of apps included in Office365, see Apps included in Conditional Access Office 365 app suite
  • MicrosoftAdminPortals - For more information, see Conditional Access Target resources: Microsoft Admin Portals
    		•
    globalSecureAccess (deprecated) conditionalAccessGlobalSecureAccess Represents traffic profile for Global Secure Access. This property is deprecated and will stop returning data on June 1, 2025. Use new Global Secure Access applications instead.
    includeApplications String collection Can be one of the following:
  • The list of client IDs (appId) the policy applies to, unless explicitly excluded (in excludeApplications)
  • All
  • Office365 - For the list of apps included in Office365, see Apps included in Conditional Access Office 365 app suite
  • MicrosoftAdminPortals - For more information, see Conditional Access Target resources: Microsoft Admin Portals
    		•
    includeUserActions String collection User actions to include. Supported values are urn:user:registersecurityinfo and urn:user:registerdevice
    includeAuthenticationContextClassReferences String collection Authentication context class references include. Supported values are c1 through c25.
    networkAccess (deprecated) conditionalAccessNetworkAccess Represents traffic profile for Global Secure Access. This property is deprecated and will stop returning data on June 1, 2025. Use new Global Secure Access applications instead.

    Relationships

    None.

    JSON representation

    The following JSON representation shows the resource type.

    {
  "includeApplications": ["String"],
  "excludeApplications": ["String"],
  "applicationFilter": {"@odata.type": "microsoft.graph.conditionalAccessFilter"},
  "includeUserActions": ["String"],
  "networkAccess": {"@odata.type": "microsoft.graph.conditionalAccessNetworkAccess"},
  "globalSecureAccess": {"@odata.type": "microsoft.graph.conditionalAccessGlobalSecureAccess"}
}