The pattern
Policy type - Counter - Scope - Purpose
CA-001-GBL-RequireMfaAllUsers
29 of 64 characters for a policy or profile
What each part means
| Part | Here | What it says | Other values |
|---|---|---|---|
| Policy type | CA | The kind of policy or profile. | CONF, COMP, SEC, APP, UPD |
| Counter | 001 | A running number. | free text |
| Scope | GBL | Who or what the item is for: the whole organisation, a location, or a kind of device. | LOC, DEPT, IT, EDU, HC |
| Purpose | RequireMfaAllUsers | What the item does, in your own words. | free text |
Parts are joined with “-”. In the builder you can change every value, the separator and the order, add parts and remove them.
When to use it
For Conditional Access policies. Microsoft recommends a name that shows a sequence number, the apps, the response, who it applies to and when. The number lets two admins talk about “CA001” on the phone.
- Number in steps of ten, or by area, so a new policy fits in between.
- Microsoft Entra allows 240 Conditional Access policies per tenant, so consolidate instead of adding.
- Keep contingency policies recognisable: Microsoft suggests starting their names with ENABLE IN EMERGENCY.
More names in this pattern
- CA-001-GBL-RequireMfaAllUsers
- CA-002-GBL-BlockLegacyAuthentication
- CA-010-IT-RequireCompliantDeviceAdmins
- CA-020-BYOD-RequireAppProtection