CA policy is getting applied on the user for risky user in AAD but the user is not showing in the risky users report

Question

Hello there,
We have a CA policy created to enforce MFA for the risky users in AAD. The policy is getting applied on one of the user accounts and prompts for the MFA however when we check we don't find that user in the risky user report in AAD.
We have already checked what if for the CA policy and the sign in logs. The sign in logs show that MFA was prompted because the user was flagged risky. We want to know how the CA policy is getting applied when the user is not found in risky users list.
Any help would be appreciated.

Answer 1

Is this a guest user? They dont show up in the Risky User List.
Is there also a Risky Sign in policy?

Answer 2

Ok, thats what I meant, you are using a CA policy or Identity Protection
Are you licensed with a P2? Do you see other accounts listed?

https://learn.microsoft.com/en-us/azure/active-directory/identity-protection/overview-identity-protection#license-requirements