Microsoft Entra ID (formerly Azure AD)

Microsoft Entra ID (formerly Azure AD) Policies.conditional Access Policy API

The policies.conditionalAccessPolicy API from Microsoft Entra ID (formerly Azure AD) — 4 operation(s) for policies.conditionalaccesspolicy.

GitHub OpenAPI
Business capability
Identity & Access Management BC-620.20

Operations 7

Each operation below carries the questions people ask an LLM about it and the instructions they give an agent to run it. Generated by API Evangelist overlay

GET /policies/conditionalAccessPolicies List conditional access policies · Get conditionalAccessPolicies from policies #
Ask an LLM
“Which conditional access policies are configured in our Microsoft Entra tenant?”
“Can I filter conditional access policies to only the ones that are enabled?”
Tell an agent
List all conditional access policies.
Show conditional access policies where {filter}.
POST /policies/conditionalAccessPolicies Create a conditional access policy · Create new navigation property to conditionalAccessPolicies for policies #
Ask an LLM
“How do I require MFA for a set of users with a new conditional access policy?”
“Can I create a conditional access policy in report-only state first?”
Tell an agent
Create a conditional access policy named {displayName} with conditions {conditions} and grant controls {grantControls}.
Add a new conditional access policy {displayName} in state {state}.
GET /policies/conditionalAccessPolicies/{conditionalAccessPolicy-id} Get a conditional access policy · Get conditionalAccessPolicies from policies #
Ask an LLM
“What conditions and grant controls does a specific conditional access policy use?”
“How can I see whether one conditional access policy is on, off or report-only?”
Tell an agent
Get conditional access policy {policy}.
Show the conditions and session controls of conditional access policy {policy}.
PATCH /policies/conditionalAccessPolicies/{conditionalAccessPolicy-id} Update a conditional access policy · Update the navigation property conditionalAccessPolicies in policies #
Ask an LLM
“Can I switch an existing conditional access policy from report-only to enabled?”
“How do I change the grant controls on a conditional access policy I already have?”
Tell an agent
Set the state of conditional access policy {policy} to {state}.
Change the grant controls of existing conditional access policy {policy} to {grantControls}.
DELETE /policies/conditionalAccessPolicies/{conditionalAccessPolicy-id} Delete a conditional access policy · Delete navigation property conditionalAccessPolicies for policies #
Ask an LLM
“How do I remove a conditional access policy from the tenant?”
“Can deletion of a conditional access policy be protected with an ETag?”
Tell an agent destructive · confirm first
Delete conditional access policy {policy}.
Remove conditional access policy {policy} if its ETag is {etag}.
POST /policies/conditionalAccessPolicies/{conditionalAccessPolicy-id}/microsoft.graph.restore Restore a deleted conditional access policy · Invoke action restore #
Ask an LLM
“Can I bring back a conditional access policy that was deleted?”
“Is there a way to undo the deletion of a conditional access policy?”
Tell an agent
Restore deleted conditional access policy {policy}.
Undelete conditional access policy {policy}.
GET /policies/conditionalAccessPolicies/$count Count conditional access policies · Get the number of the resource #
Ask an LLM
“How many conditional access policies do we have?”
“Can I count conditional access policies that match a filter?”
Tell an agent
Count all conditional access policies.
Give me the number of conditional access policies matching {filter}.

Documentation

📖
Documentation
https://learn.microsoft.com/en-us/graph/api/overview
📖
Authentication
https://learn.microsoft.com/en-us/graph/auth/
📖
Documentation
https://learn.microsoft.com/en-us/graph/change-notifications-overview

Specifications

⚙
OpenAPI
https://raw.githubusercontent.com/api-evangelist/azure-ad/refs/heads/main/openapi/azure-ad-policies-conditionalaccesspolicy-api-openapi.yml

Other Resources

🔗
SDKs
https://learn.microsoft.com/en-us/graph/sdks/sdks-overview
🔗
ChangeLog
https://developer.microsoft.com/en-us/graph/changelog
🔗
Webhooks
https://raw.githubusercontent.com/api-evangelist/azure-ad/refs/heads/main/asyncapi/azure-ad-change-notifications-webhooks.yml

Work with this as data

Every API here is available over the APIs.io API and to AI agents over MCP.

MCP server

One button, every client — Claude, Cursor, VS Code and the rest.

https://apis.io/mcp

Tools for apis

7 MCP tools reach this
  • find_apisBrowse and filter every API in the catalog.
  • get_api_artifactsOne API's artifacts, grouped by type.
  • get_openapiThe primary OpenAPI for this API.
  • find_similar_apisAPIs that look like this one.
  • apis_io_searchSTART HERE — APIs, providers and tags for one query, each with its total.
  • resolveTurn a domain, URL or GitHub org into the provider it belongs to.
  • find_cohortsEvery scored population of providers in the catalog.
All 92 tools →

Call it yourself

curl for this page
This API 
curl "https://apis.io/api/v1/apis/azure-ad:azure-ad-policies-conditionalaccesspolicy-api"
All apis 
curl "https://apis.io/api/v1/apis?limit=25"

Discovery needs no key. Ratings and market analysis are Pro.

Get an API key

Free tier, no form to fill in. Signing in shares your email address with us — we store it to create your key and to recognise you if you sign in with another provider. See our Privacy Policy and Terms.

GitHub Google LinkedIn

A second provider on the same verified email joins the account you already have.

OpenAPI Specification

azure-ad-policies-conditionalaccesspolicy-api-openapi.yml Raw ↑ 
openapi: 3.2.0
info:
  title: Identity.SignIns Policies.conditional Access Policy API
  version: v1.0
servers:
- url: https://graph.microsoft.com/v1.0/
  description: Core
security:
- azureaadv2: []
tags:


# --- truncated at 32 KB (34 KB total) ---
# Full source: https://raw.githubusercontent.com/api-evangelist/azure-ad/refs/heads/main/openapi/azure-ad-policies-conditionalaccesspolicy-api-openapi.yml