Export Conditional Access Named Locations with PowerShell

By /

Listen to this Post

2025-02-08

Exporting Conditional Access Named Locations is a crucial task for administrators managing Microsoft Entra ID (formerly Azure AD). While the Microsoft Entra admin center allows you to view Named Locations, generating a detailed report can be cumbersome. PowerShell simplifies this process by enabling you to export these locations to a CSV file for better analysis and documentation.

Below is a PowerShell script that automates the export of Conditional Access Named Locations:


<h1>Import the Microsoft Graph module</h1>

Import-Module Microsoft.Graph.Identity.SignIns

<h1>Connect to Microsoft Graph</h1>

Connect-MgGraph -Scopes "Policy.Read.All"

<h1>Get Conditional Access Named Locations</h1>

$namedLocations = Get-MgIdentityConditionalAccessNamedLocation

<h1>Export to CSV</h1>

$namedLocations | Select-Object DisplayName, IpRanges, IsTrusted, CreatedDateTime, ModifiedDateTime | Export-Csv -Path "NamedLocations.csv" -NoTypeInformation

<h1>Disconnect from Microsoft Graph</h1>

Disconnect-MgGraph

Steps to Execute the Script:

  1. Ensure you have the Microsoft Graph PowerShell SDK installed. If not, install it using:
    Install-Module Microsoft.Graph -Force
  2. Run the script in a PowerShell session with administrative privileges.
  3. The script will generate a CSV file named `NamedLocations.csv` in the current directory.

Explanation of the Script:

  • Import-Module Microsoft.Graph.Identity.SignIns: Imports the necessary Microsoft Graph module.
  • Connect-MgGraph: Connects to Microsoft Graph with the required permissions.
  • Get-MgIdentityConditionalAccessNamedLocation: Retrieves the Named Locations configured in Conditional Access policies.
  • Export-Csv: Exports the data to a CSV file for further analysis.

What Undercode Say:

Exporting Conditional Access Named Locations using PowerShell is a powerful way to streamline administrative tasks in Microsoft Entra ID. This script not only saves time but also ensures that you have a detailed and organized report of your Named Locations. PowerShell’s flexibility allows you to customize the script further, such as filtering specific locations or adding additional properties to the export.

For administrators working in Linux environments, similar tasks can be accomplished using tools like `jq` for JSON parsing and `curl` for API interactions. For example, you can use the following command to interact with Microsoft Graph API from a Linux terminal:

curl -X GET -H "Authorization: Bearer <ACCESS_TOKEN>" "https://graph.microsoft.com/v1.0/identity/conditionalAccess/namedLocations" | jq .

Replace `` with your Microsoft Graph API access token. This command fetches Named Locations in JSON format, which can be parsed and processed using jq.

Additionally, Linux users can leverage `csvkit` to manipulate CSV files directly from the command line. For example, to filter and sort the exported CSV file:

csvcut -c DisplayName,IpRanges NamedLocations.csv | csvsort -c DisplayName > SortedNamedLocations.csv

This command extracts specific columns and sorts the data by the `DisplayName` column.

For more advanced automation, consider integrating these scripts into cron jobs or CI/CD pipelines. This ensures that your Named Locations are regularly exported and updated without manual intervention.

For further reading on Microsoft Graph API and PowerShell, refer to the official documentation:
– Microsoft Graph API Documentation
– PowerShell Documentation

By combining PowerShell and Linux commands, you can create a robust workflow for managing Conditional Access Named Locations across different environments. This approach not only enhances productivity but also ensures consistency and accuracy in your security configurations.

References:

Hackers Feeds, Undercode AIFeatured Image

Related Posts: