Skip to main content
Version: 2.1.0

Test-MtGsaCompliantNetworkBreakGlassExcluded

SYNOPSIS​

Checks that every Compliant Network Conditional Access policy excludes the emergency access (break-glass) accounts.

SYNTAX​

Test-MtGsaCompliantNetworkBreakGlassExcluded [-ProgressAction <ActionPreference>] [<CommonParameters>]

DESCRIPTION​

A Conditional Access policy that enforces the Global Secure Access Compliant Network control blocks access when the session is not on a compliant network. If such a policy does not exclude the emergency access (break-glass) accounts, it can lock out the very accounts needed to recover the tenant. This check verifies that every enabled Compliant Network enforcement policy excludes all configured break-glass accounts and groups.

Emergency access accounts are read from the EmergencyAccessAccounts setting in maester-config.json.

EXAMPLES​

EXAMPLE 1​

Test-MtGsaCompliantNetworkBreakGlassExcluded

Returns $true if every Compliant Network enforcement policy excludes the break-glass accounts.

PARAMETERS​

-ProgressAction​

Determines how PowerShell responds to progress updates generated by a script, cmdlet, or provider, such as the progress bars generated by Write-Progress.

Type: ActionPreference
Parameter Sets: (All)
Aliases: proga

Required: False
Position: Named
Default value: None
Accept pipeline input: False
Accept wildcard characters: False

CommonParameters​

This cmdlet supports the common parameters: -Debug, -ErrorAction, -ErrorVariable, -InformationAction, -InformationVariable, -OutVariable, -OutBuffer, -PipelineVariable, -Verbose, -WarningAction, and -WarningVariable. For more information, see about_CommonParameters.

INPUTS​

OUTPUTS​

System.Boolean​

NOTES​

https://maester.dev/docs/commands/Test-MtGsaCompliantNetworkBreakGlassExcluded