Conditional Access Gap Analysis
The prompt
In Microsoft Entra ID, analyse the conditional access policies currently in place. Identify: 1. Policies that are in report-only mode (not enforced) 2. Users or groups explicitly excluded from policies that require MFA or compliant device 3. Applications not covered by any conditional access policy 4. Sign-in events in the last 7 days that were interrupted or failed due to conditional access — list the top 10 by frequency Return findings as a structured gap report with a priority column (high / medium / low) based on the exposure level of each gap.
How to use it
- 1Select Copy the prompt above.
- 2Paste it into Microsoft 365 Copilot.
- 3Replace anything in brackets with your own detail, then send it.
Copilot gathers and drafts. You verify and decide. Check every figure, name and date against the system it came from before you act on it.
Written for
Identity Security Analyst, Security Administrator
More for Microsoft Copilot for Security
- First Look — Incident Summary
- Alert Triage — Is This a True Positive?
- Multi-Alert Correlation — Single Incident Thread
- Device Investigation — Rapid Scope
From the source collection in awesome-microsoft-copilot-prompts, licensed CC BY-SA 4.0.