Question regarding Microsoft Admin Portals app in Conditional Access

Hi IMK,

I don't see that it would be an issue, but it should be an easy thing to test.

Another approach would be to use PIM and restrict all admin roles until they enable such rules in the PIM menu.

Best regards.

Hello @IMK,

Thank you for posting your query on Microsoft Q&A.

Blocking access to the "Microsoft Admin Portals" app for non-admin users will not prevent normal or guest users from accessing Microsoft Entra ID for purposes like 2FA registration. Regular users and guests can still access Entra ID to register for two-factor authentication (2FA), satisfying the requirement for all users to have 2FA to access any resource.

The "Microsoft Admin Portals" app is specifically for administrative access to manage Microsoft Entra and other services. Restricting access to this app for non-admin users will only block their access to the admin portals; it won’t affect their access to other services or resources they’re authorized to use.

You can safely block non-admin users from accessing the "Microsoft Admin Portals" app without impacting their access to Microsoft Entra for 2FA registration.

The Microsoft Admin Portals suite includes:

• Azure portal
• Exchange admin center
• Microsoft 365 admin center
• Microsoft 365 Defender portal
• Microsoft Entra admin center
• Microsoft Intune admin center
• Microsoft Purview compliance portal
• Microsoft Teams admin center

For more details, refer to the documentation on: Conditional Access and Microsoft Admin Portals.

I hope this information is helpful. Please feel free to reach out if you have any further questions.

If the answer is helpful, please click "Accept Answer" and kindly upvote it. If you have extra questions about this answer, please click "Comment".

Thanks,
Raja Pothuraju.