Trouble restoring an Entra ID conditional access policy?

If you're having trouble restoring a conditional access policy, it may be due to a protected action blocking the restore. To resolve this, remove the relevant permission in the Microsoft Entra admin center and try again.

Steps to resolve:

1. In the Microsoft Entra admin center, go to the left-hand navigation panel and select Roles & admins under Identity.

2. Select Protected actions.

3. Remove the permission: microsoft.directory/conditionalAccessPolicies/create

4. Try restoring the policy again.