Entra policy -- enable vs report only

Question

Entra policy -- enable vs report only

Eben Walker 0

simple question -- when the enable policy is showing

User's image

does that mean report only is on and the policy is NOT enabled?

Is this confusing to others?

0 comments

2 answers

Your answer

Answer 1

Rukmini 43,820 Microsoft External Staff Moderator

Hello Eben Walker,

Admins can test Conditional Access policies in Report-only mode without enforcing them.

When a policy is set to report only:

Results are displayed in Sign-in logs → Conditional Access / Report-only. It is evaluated during sign-in but not enforced
You may track the impact using Conditional Access Insights (Azure Monitor) Therefore, the policy is currently in Report-only mode and NOT enabled.

Reference:

Conditional Access Policy Insights: Monitoring and Evaluation - Microsoft Entra ID | Microsoft

If the resolution was helpful, kindly take a moment to accept the answer and upvote it 👍 it as a token of appreciation.

Rukmini 43,820 Reputation points Microsoft External Staff Moderator

2025-11-21T09:24:34.0666667+00:00

Hello Eben Walker, If the resolution was helpful, kindly take a moment to accept the answer and upvote it 👍 it as a token of appreciation.
Eben Walker 0 Reputation points

2025-11-25T20:09:26.49+00:00

Thanks to the two people who responded. Unfortunately your answers are opposite each other.

The way the button shows on the policy is not clear enough -- the designer has failed to make it clear what is meant by Report Only On
Rukmini 43,820 Reputation points Microsoft External Staff Moderator

2025-11-26T08:13:31.0366667+00:00

Eben Walker Please check this https://learn.microsoft.com/en-us/entra/identity/conditional-access/concept-conditional-access-report-only
Rukmini 43,820 Reputation points Microsoft External Staff Moderator

2025-11-27T11:09:38.3266667+00:00

Hello Eben Walker Following up to see if the above provided information was helpful. If you have any further queries do let us know.

Answer 2

Marcin Policht 101.1K MVP Volunteer Moderator

To enable Report-only functionality, you would select Report-only. The On setting applies policy and provides reporting functionality.

Effectively, the screenshot you provided, indicates that the policy IS enabled.

If the above response helps answer your question, remember to "Accept Answer" so that others in the community facing similar issues can easily find the solution. Your contribution is highly appreciated.

hth

Marcin

0 comments