Azure Active Directory (Azure AD) is a subscription owned by your business.
You wish to establish a conditional access policy for Azure AD.
When connecting to Azure AD from untrusted places, members of the Global Administrators group must utilize Multi-Factor Authentication and a device that is connected to Azure AD.
Solution: To change the user settings, go to the multi-factor authentication page.
Is the aim being met by the solution?