Remove-EntraConditionalAccessPolicy

Module:: Microsoft.Entra Module v1.1

Deletes a conditional access policy in Microsoft Entra ID by Id.

Syntax

Default (Default)

Remove-EntraConditionalAccessPolicy

    -PolicyId <String>
    [<CommonParameters>]

Description

This cmdlet allows an admin to delete a conditional access policy in Microsoft Entra ID by Id.

Conditional access policies are custom rules that define an access scenario.

In delegated scenarios with work or school accounts, when acting on another user, the signed-in user must have a supported Microsoft Entra role or custom role with the necessary permissions. The least privileged roles for this operation are:

Security Administrator
Conditional Access Administrator

Examples

Example 1: Deletes a conditional access policy in Microsoft Entra ID by PolicyId

Connect-Entra -Scopes 'Policy.ReadWrite.ConditionalAccess','Policy.Read.All'
$policy = Get-EntraConditionalAccessPolicy | Where-Object {$_.DisplayName -eq 'MFA policy'}
Remove-EntraConditionalAccessPolicy -PolicyId $policy.Id

This command deletes a conditional access policy in Microsoft Entra ID.

-PolicyId parameter specifies the Id of a conditional access policy.

Parameters

-PolicyId

Specifies the policy Id of a conditional access policy in Microsoft Entra ID.

Parameter properties

Type:	System.String
Default value:	None
Supports wildcards:	False
DontShow:	False

Parameter sets

(All)

Position:	Named
Mandatory:	True
Value from pipeline:	True
Value from pipeline by property name:	True
Value from remaining arguments:	False

CommonParameters

This cmdlet supports the common parameters: -Debug, -ErrorAction, -ErrorVariable, -InformationAction, -InformationVariable, -OutBuffer, -OutVariable, -PipelineVariable, -ProgressAction, -Verbose, -WarningAction, and -WarningVariable. For more information, see about_CommonParameters.