Graph pass-through

Sign-in triage

Investigate Conditional Access blocks without exporting CSVs from Entra. Sign-ins are fetched on demand from Graph - not stored long-term in Policytab.

Create your account, set up a workspace, and get 14 days of Pro - connect tenants, detect drift, and run impact analysis. No credit card required.

Entra sign-in triage with blocking policies and exclusion shortcuts

Triage workflow

Filter sign-ins by user, application, status, and day. Per-user pages rank CA policies that blocked, by failure count. Raw Graph JSON is available in a sidesheet for deep debugging.

When a block warrants a temporary exception, one-click exclusion request prefills the policy and user from the sign-in context.

Cursor-paginated reads from Microsoft Graph
Applied CA policies shown inline on each event
Links to impact analysis and user what-if simulation
Enterprise: extended analysis windows up to 90 days (Graph limit)

Try it on your Entra tenant

Connect a tenant, take a snapshot, and compare Conditional Access policies against your baseline in minutes.