Categories

This article covers how to use the What If tool to identify any policies that might be blocking access to CoreView service accounts.


Overview 

Using the What If tool you can easily identify any the policy that is currently blocking the access of our service accounts (coreview.reports<randomicnumber>@<onmicrosoft domain>) or our management user (4ward365.admin@<onmicrosoft domain>). 

You can find the What If tool on the Conditional Access - Policies page in the Azure portal. (https://portal.azure.com/#blade/Microsoft_AAD_IAM/ConditionalAccessBlade/Policies) 

 

How to use the What If tool: 

1. To start the tool, in the toolbar on top of the list of policies, click What If. 


ShapeGraphical user interface, text, application, email Description automatically generated 


2. In the User field type, expand the user or workload identity section, select User and select from     the list one of our accounts (i.e. coreview.reports<randomicnumber>@<onmicrosoft         domain>): 


Graphical user interface, text, application Description automatically generated 

 

In the IP address field enter one of the following addresses, and in the location field choose the information appropriate for your location.   

For the Europe Data center, choose 'Ireland' and refer to the following IP addresses  

Azure CCC (EU)         

  • 52.178.220.169 
  • 13.79.166.132 
  • 52.164.205.60 
  • 40.69.61.123 
  • 191.239.215.199 
  • 20.191.46.79


For the USA Data center, choose 'Virginia' and refer to the following IP addresses  

Azure CCC (US East)  

    

  • 52.225.217.154
  • 104.209.147.75 
  • 40.70.44.94 
  • 137.116.90.35 
  • 52.225.222.18 
  • 40.65.233.115  


For the Canadian Data Center, choose 'Quebec City' and refer to the following IP addresses  

Azure CCC (Canada East) 

  • 52.229.116.78 
  • 40.69.100.107 
  • 52.242.35.38 
  • 52.242.126.90 
  • 52.235.47.42 
  • 52.155.24.77


For the GOV Data center, choose 'Virginia' and refer to the following IP addresses  

Azure GCC (US East)  

  • 13.72.21.184 
  • 52.247.175.28 
  • 13.72.21.53 
  • 52.227.221.240

 

Click on What If button and let us know what the evaluation results are. 

Graphical user interface, text, application, email, Teams Description automatically generated 


Refer to the following article for more details:  

https://docs.microsoft.com/en-us/azure/active-directory/conditional-access/what-if-tool