Config/ns-defaults.json
|
{ "mfaRegistrationThresholdPct": 90, "ssprRegistrationThresholdPct": 70, "inactiveDays": 90, "signInBypassDays": 7, "excessiveExclusionGroupCount": 3, "exclusionConsistencyThresholdSmall": 1, "exclusionConsistencyThresholdPct": 40, "smallPolicySetThreshold": 4, "weakMfaMethods": ["sms", "voice", "mobilePhone", "email", "softwareOneTimePasscode"], "strongMfaMethods": ["microsoftAuthenticatorPush", "microsoftAuthenticatorPasswordless", "passKeyDeviceBound", "passKeyDeviceBoundAuthenticator", "windowsHelloForBusiness", "fido2", "x509CertificateMultiFactor"], "breakGlassPattern": "break|glass|emergency|bg[._-]|breakglass", "pimEligibleRequiresMfa": true, "privilegedRoleIds": [ "62e90394-69f5-4237-9190-012177145e10", "e8611ab8-c189-46e8-94e1-60213ab1f814", "194ae4cb-b126-40b2-bd5b-6091b380977d", "729827e3-9c14-49f7-bb1b-9608f156bbb8", "b0f54661-2d74-4c50-afa3-1ec803f12efe", "fe930be7-5e62-47db-91af-98c3a49a38b1", "f28a1f50-f6e7-4571-818b-6a12f2af6b6c", "29232cdf-9323-42fd-ade2-1d097af3e4de", "966707d0-3269-4727-9be2-8c3a10f19b9d", "7698a772-787b-4ac8-901f-60d6b08affd2", "158c047a-c907-4556-b7ef-446551a6b5f7", "9b895d92-2cd3-44c7-9d02-a6ac2d5ea5c3", "7be44c8a-adaf-4e2a-84d6-ab2649e08a13", "c4e39bd9-1100-46d3-8c65-fb160da0071f", "e6d1a23a-da11-4be4-9570-befc86d067a7", "b1be1c3e-b65d-4f19-8427-f6fa0d97feb9", "a9ea8996-122f-4c74-9520-8edcd192826c", "17315797-102d-40b4-93e0-432062caca18", "11648597-926c-4cf3-9c36-bcebb0ba8dcc" ], "auditRoleTemplates": { "62e90394-69f5-4237-9190-012177145e10": "Global Administrator", "f2ef992c-3afb-46b9-b7cf-a126ee74c451": "Global Reader", "194ae4cb-b126-40b2-bd5b-6091b380977d": "Security Administrator", "5d6b6bb7-de71-4623-b4af-96380a352509": "Security Reader", "b1be1c3e-b65d-4f19-8427-f6fa0d97feb9": "Conditional Access Administrator" }, "office365AppIds": [ "00000002-0000-0ff1-ce00-000000000000", "00000003-0000-0ff1-ce00-000000000000", "00000004-0000-0ff1-ce00-000000000000", "5e3ce6c0-2b1f-4285-8d4b-75ee78787346", "cc15fd57-2c6c-4117-a88c-83b1d56b4bbe", "00000006-0000-0ff1-ce00-000000000000", "4765445b-32c6-49b0-83e6-1d93765276ca" ], "disabledTests": [], "scoringWeights": { "criticalPerFinding": 10, "criticalCap": 30, "highPerFinding": 5, "highCap": 25, "mediumPerFinding": 2, "mediumCap": 15, "lowPerFinding": 1, "lowCap": 5 } } |