Exclude User Account From Future Conditional Access Policies

Question

Regarding Conditional Access Policies, is there a way to exclude specific admin accounts from them without having to edit individual ones, and without having to ensure that all future Conditional Access Policies specifically exclude the users?

Context: I'm looking at creating Break Glass accounts which I don't want affected by any CAP (such as MFA etc)

Answer 1

Hi @Rhys Thomas

Unfortunately there is no such feature to exempt an account from all Conditional Access Policies. You would need to exclude the break-glass accounts from every Conditional Access Policy that is set up in your environment.

You could suggest this feature to the Azure AD Microsoft Team:

Azure Active Directory

https://feedback.azure.com/d365community/forum/22920db1-ad25-ec11-b6e6-000d3a4f0789

----------------------------------

If this is helpful please accept answer.