Check Users Assigned MAM Enforcement
- Navigate to the Groups – Entra ID portal, locate and select the search bar at the top and specify Users.MobileApplicationManagement for the group search criteria. Select the returned value to verify which users are receiving the mobile application management conditional access policy enforcement.
- From the Overview page of the selected Group, locate and select the Members tab. Here you will see a list of all users who are actively being required to access Microsoft tied resources on mobile devices through the equivalent dedicated Microsoft Mobile App.
- If you access this group and you see a discrepancy in your membership enforcement; it may be necessary to reference this guide on assigning users to groups in Entra ID. A discrepancy can led to users accessing Microsoft tied resources from a mobile device without creating a container to store corporate data.
Common Questions
- If you assign a user to this group, they will need to follow this guide to aid them in configuring the Microsoft Mobile Applications properly, failure to authenticate properly into these applications will prevent users from accessing Microsoft tied resources from their mobile phones.
- Once a user has Mobile Application Management applied to their mobile phone, they are technically enrolling their mobile phone to be bound to the Microsoft Tenant that their work account is assigned to. If they attempt to assign another tenant’s work account to the device, they will receive an error telling them that they need to unenroll the current account before they can add a different work account to the Mobile Application.
- If you attempt to spread your work account to an iPad or a tablet while maintaining the original MAM enforcement enrollment through your phone; this can be done but follows a different path of enrollment that can be a bit unstable compared to having it attached to one single mobile device.
Need Assistance?
Reach out to your Customer Success Manager to discuss how a Sittadel cybersecurity analyst can assist in managing these tasks for you. New to our services? Inquire about arranging a consultation to explore optimizing your Azure environment for painless management.