🚦🟢CA MFA for All Users .json

{
    "@odata.type": "#microsoft.graph.conditionalAccessPolicy",
    "displayName": "🚦🟢CA: MFA for All Users",
    "state": "enabled",
    "partialEnablementStrategy": null,
    "sessionControls": null,
    "conditions": {
        "userRiskLevels": [],
        "signInRiskLevels": [],
        "clientAppTypes": ["browser", "mobileAppsAndDesktopClients"],
        "applications": {
            "includeApplications": ["All"],
            "excludeApplications": [
                "0000000a-0000-0000-c000-000000000000"
            ]
        },
        "users": {
            "includeUsers": ["All"],
            "excludeUsers": ["22717c47-8bd5-40b9-a105-cae7bc041f27"],
            "excludeGroups": ["91c5dcc1-08ed-43b7-80cb-b9f725b96cad"]
        },
        "locations": {
            "includeLocations": ["All"],
            "excludeLocations": []
        }
    },
    "grantControls": {
        "operator": "OR",
        "builtInControls": ["mfa"]
    }
}