I'm interested in hearing how others keep track of changes to Conditional Access policies over time. I've noticed that in various tenants, these policies change gradually, with exceptions added, controls altered, and some items disabled temporarily without being reinstated properly. This can cause confusion later on, especially when trying to understand questions like "what changed and why" a year down the line. Do you use change management processes, regular reviews, scripts, or any other methods to prevent your Conditional Access setups from drifting too much?
1 Answer
We manage our Conditional Access policies using Terraform, and any adjustments require formal change requests, which really helps in tracking changes over time. It keeps everything organized and prevents unexpected adjustments from slipping through.
Smart approach! Do you also utilize Terraform for other aspects of Entra ID?