Entra Policy Suite settings · Settings > Conditional Access options from Graph

Read the policy options from Microsoft Graph every month

Key	CaOptions.Enabled
Where	Settings > Conditional Access options from Graph
Type	On / off
Default	On

What it does

Once a month the CaOptions job reads Microsoft Graph: the values every Conditional Access field allows (Graph v1.0's published schema) and your tenant's authentication strengths, named locations, terms of use and directory roles. The policy Edit form offers exactly these as dropdowns, check boxes and pickers; a value Graph added since this release is offered too, marked 'new from Graph', and listed on the job's run.

When enabled

On (the default): the job runs on the 1st of every month at 04:00 (Platform.TimeZone). It only reads. Run now on the Jobs page reads at once.

When disabled

Off: no monthly read. The form keeps the last values read, or the list shipped with this release, and Run now still works.

Risk and how to reverse it

Nothing changes in the tenant. Off, a value Microsoft adds later is not offered in the form until this release's list has it (it stays editable in Advanced (JSON)). Reversible.

Requires

Admin. No permission beyond the engine's own read rights.