Paste the JSON of a Conditional Access policy and get a plain-English readout: who it targets, what it demands, every exclusion, and the common misconfigurations flagged. Nothing is uploaded.
Get the JSON with:
Get-MgIdentityConditionalAccessPolicy -ConditionalAccessPolicyId <id> | ConvertTo-Json -Depth 10 # or all of them: Get-MgIdentityConditionalAccessPolicy | ConvertTo-Json -Depth 10