GeldHades27355

OK, I got it working. That being said, I've rarely seen something so fickle in its authentication preferences. 🤪 It seems using a different combination of fingers on my keyboard...

Same result - no change. I can't even see a pattern here. For example: Most Conditional Access policies are "failed", but a few are "passed". Specifically: - MT.1006 is "passed"...

OK, just went to graph explorer after `connect-maester` and tried querying [[https://graph.microsoft.com/beta/policies/authenticationMethodsPolicy/authenticationMethodConfigurations('Fido2')](https://graph.microsoft.com/beta/policies/authenticationMethodsPolicy/authenticationMethodConfigurations(%27Fido2%27))](url) directly. Initially got an "access denied" not enough permissions or something like that. I manually granted permission to...

So whatever is happening, `connect-maester` doesn't appear to request sufficient access when I run it - but not for all resources, just for some.

Nope - same result. Connect-mggraph appears to connect successfully, but still no change. For comparison: we also use https://github.com/microsoft/Microsoft365DSC, which connects fine and is able to get accurate data through...

Just for fun, I ran `export-m365dscconfiguration`, along with all sign-ins etc. to see whether it'll straighten access to my tenant out - but I still get the same empty access...

Thanks @MWestermark - I can confirm. Running maester on PS7 and I get exactly the results I expect. (on W11 btw) Seems something is broken with PS5.

I'd love to, but I'm seriously busy on other things right now, sorry! I mentioned one example in the initial post: Business Premium does not include Entra ID P2, only...

Yes, as I mentioned, BP includes Entra P1. So I get a "fail" for user risk management, which is, indeed, not enabled. That doesn't seem right to me. It should...

Sorry for the exasperation - does anyone READ what I post? _User Risk_ fails, as an example. P1 doesnt't support that - so BP doesn't either. I dont' have time...