Conditional Access with Intune compliance, reporting and admin roles

Skills you'll practise

• Roll out a Conditional Access policy that requires a compliant device using report-only mode and documented exclusions
• Use the What If tool and sign-in logs to explain why a policy did or didn't apply
• Find device compliance, update and audit information in the right Intune report or log
• Assign least-privileged Intune roles with scope groups and scope tags instead of Entra admin roles
• Protect high-impact changes with Multi Admin Approval and explain its workflow

Course outline

1. 1.Requiring compliant devices without locking people outLesson · 22 min
2. 2.Reports and audit logsLesson · 14 min
3. 3.Least-privilege Intune administrationLesson · 18 min
4. 4.Conditional Access with Intune compliance, reporting and admin roles: knowledge checkKnowledge check · 15 questions
5. 5."Switch on compliant devices tomorrow"Scenario
6. 6.Final exam7 questions · passing it completes the course, so people who already know the material can test out

Sources it draws on

The lessons and questions are written from these references, so learners can go back to the original.

• Microsoft Learn: Device compliance policies in Microsoft Intune
• Microsoft Learn: Conditional Access policy insights: report-only mode
• Microsoft Learn: The Conditional Access What If tool
• Microsoft Learn: Manage emergency access admin accounts
• Microsoft Learn: Microsoft Intune reports
• Microsoft Learn: Audit changes and events in Microsoft Intune
• Microsoft Learn: Role-based access control (RBAC) with Microsoft Intune
• Microsoft Learn: Use Multi Admin Approval in Intune