Tests authored
- MT.1224Microsoft-managed Conditional Access policies should not be left in report-only mode.
- MT.1252Apps scoped with Exchange RBAC for Applications should not hold the same or a broader permission tenant-wide in Microsoft Entra ID.
- MT.1260High-risk users should not be left unremediated in Entra ID Protection.