Policy.Read.All
— application permission, granted to the app registration with admin consent.
Endpoint:
GET /v1.0/policies/authenticationMethodsPolicy
Group targets are resolved to names from the cached groups; an unresolved id is shown as-is.
If a permission is missing, this report shows a red load error with the Graph status code — not an empty table.
Authentication Methods Policy Audit
Which sign-in methods the tenant allows, for whom, and whether the passkey registration campaign is running. This is the policy that decides whether users can register a phishing-resistant method at all.
No authentication methods policy was returned. Please contact support if this is not the expected result.