Skip to main content
Version: 2.1.0

Test-MtGsaPrivateAccessAppCompliantDevice

SYNOPSIS​

Checks if all Entra Private Access applications are covered by a Conditional Access policy that requires a managed device.

SYNTAX​

Test-MtGsaPrivateAccessAppCompliantDevice [-ProgressAction <ActionPreference>] [<CommonParameters>]

DESCRIPTION​

Every Entra Private Access (and Quick Access) application should be protected by an enabled Conditional Access policy that requires a managed device - either by targeting the application directly or via All cloud apps. A policy satisfies the requirement when it grants 'compliantDevice' (Intune compliant) or 'domainJoinedDevice' (Microsoft Entra hybrid joined), ensuring private apps are only reachable from managed endpoints.

Note: this check evaluates application coverage only. It does not evaluate whether the policy applies to every user of the app (a policy could be scoped to a subset of users).

EXAMPLES​

EXAMPLE 1​

Test-MtGsaPrivateAccessAppCompliantDevice

Returns $true if every Entra Private Access application is covered by a managed-device policy.

PARAMETERS​

-ProgressAction​

Determines how PowerShell responds to progress updates generated by a script, cmdlet, or provider, such as the progress bars generated by Write-Progress.

Type: ActionPreference
Parameter Sets: (All)
Aliases: proga

Required: False
Position: Named
Default value: None
Accept pipeline input: False
Accept wildcard characters: False

CommonParameters​

This cmdlet supports the common parameters: -Debug, -ErrorAction, -ErrorVariable, -InformationAction, -InformationVariable, -OutVariable, -OutBuffer, -PipelineVariable, -Verbose, -WarningAction, and -WarningVariable. For more information, see about_CommonParameters.

INPUTS​

OUTPUTS​

System.Boolean​

NOTES​

https://maester.dev/docs/commands/Test-MtGsaPrivateAccessAppCompliantDevice