Scenario
During the onboarding process, you receive an error stating that you don’t meet the required criteria to access the resource, despite successfully signing in.
Reason
Conditional access policies may be in place that are preventing Global Admins from completing the configuration process.
Resolution
To investigate why access is being blocked due to Conditional Access policies, follow these steps:
Sign in to the Microsoft Entra Admin Center.
From the menu sidebar, select Users, then select Sign-in logs.
Locate and select the specific sign-in attempt that encountered an issue.
In the details pane, expand the Conditional Access tab.
Look under Result or Cause of Failure to identify which Conditional Access policy was applied and why access was denied.
Review the Policy Name, Grant Controls, and Conditions to determine what requirements were not met.
Based on the information, review and adjust the relevant Conditional Access policies under Microsoft Entra > Protection > Conditional Access, if needed.
Ensure the affected user or role (e.g., Global Admin) has the necessary permissions and meets any policy requirements (such as compliant device, MFA, trusted location, etc.).