Conditional access unavailable on Microsoft Entra

PonteFinal 20 Reputation points
2025-03-11T15:36:50.1866667+00:00

Months ago i've exluded a user from a policy on Security | Authentication Methods | Policies | Security | Conditional Access | Policies | Require MFA for internal users (admins not included) - Basic

Now i need to exclude another user but all the field are greyed and i cannot exlude new users from policy neither remove the excluded ones.

Microsoft Security Microsoft Entra Microsoft Entra ID
{count} votes

Accepted answer
  1. Goutam Pratti 6,170 Reputation points Microsoft External Staff Moderator
    2025-03-12T09:57:00.03+00:00

    Hello @PonteFinal ,

    I Understand that your Conditional Access is unavailable on Microsoft EntraID due to that you are not able to add and remove users from a policy.

    Please check withthe Below Conditions:

    1. Make sure you have a working Microsoft Entra tenant with Microsoft Entra ID P1, P2, or trial license enabled. If needed, create one for free.
      If you check under Microsoft Entra ID > Licenses > All products , you can confirm which licenses are available for your tenant and whether you have the correct number available.
      Also If you check under Microsoft Entra ID > Licenses > Licensed features, you can confirm whether Conditional Access should be available for your tenant or not.
      User's image
    2. Ensure that your account has the necessary permissions to modify Conditional Access policy which you have created. To Modify or Create Conditional Access you need Conditional Access Administrator or Global Administrator.

    For Additional information follow: Prerequisites , Conditional-Access-Policies

    Hope this helps. Do let us know if you any further queries.


    If this answers your query, do click Accept Answer and Yes for was this answer helpful. And, if you have any further query do let us know.

    1 person found this answer helpful.

1 additional answer

Sort by: Most helpful
  1. PonteFinal 20 Reputation points
    2025-03-13T16:15:10.8366667+00:00

    Hi @Goutam Pratti

    Many thanks for your reply.

    I do not have a YES under Feature Available column. Instead i have a link to a trial Experimentar o Microsoft Entra ID P2

    User's image

    Microsoft Entra ID P2 trial is a 30 days trial.

    If i need do exclude a new user after that period? It´s weird because i never did a trial and was able to exclude a user before.


Your answer

Answers can be marked as Accepted Answers by the question author, which helps users to know the answer solved the author's problem.