Persistent browser session allowed
Checks whether persistent browser sessions are allowed without restrictions in Conditional Access.
How to fix it
Restrict persistent browser sessions via Conditional Access, especially for unmanaged devices, to reduce risk on shared computers.
Required Microsoft Graph permissions
EntraAnalyzer needs the following read-only Graph permissions to evaluate this rule:
Policy.Read.All
Further reading
Run this check on your tenant
EntraAnalyzer evaluates this rule automatically on every scan and emails you the results.
Get started — free first scan →