Users in excluded group is not being excluded from the conditional access policy

riqway 1

There is a CAP where it blocks people who are included in the CAP. I have excluded a group so it doesn't get applied to those users in the group. However they are still being blocked. But if I add the users directly in excluded users instead of the group, it gets applied. I need to know why?

AmanpreetSingh-MSFT 56,506 Reputation points

2022-04-11T08:20:54.49+00:00

Hi @riqway • Thank you for reaching out.

Conditional access policy supports all types of groups in Azure AD, including dynamic or assigned, security and distribution groups. The policy applies to all the nested users and groups as well. However, if users or groups are a member of over 2048 groups their access may be blocked and this limit applies to both direct and nested group membership. If this is not the case, can you please reproduce the issue and share the latest correlationID and timestamp from the sign-in activity logs of the user account that should be excluded but is still being blocked by CA Policy.
AmanpreetSingh-MSFT 56,506 Reputation points

2022-04-13T05:17:16.34+00:00

@riqway • Just checking if you had a chance to look into it.
riqway 1 Reputation point

2022-04-18T22:39:01.51+00:00

looking into it. will be back.

Share via

Users in excluded group is not being excluded from the conditional access policy