Conditional Access, + New policy greyed out

Hi @james wang , have you checked that all prerequisites?

• A working Microsoft Entra tenant with Microsoft Entra ID P1 or trial licenses enabled.If you need to, create one for free.
• An account with at least the Conditional Access Administrator role. Some MFA settings can also be managed by an Authentication Policy Administrator.
• A non-administrator account with a password that you know. For this tutorial, we created such an account, named testuser. In this tutorial, you test the end-user experience of configuring and using Microsoft Entra multifactor authentication.
• If you need information about creating a user account, see Add or delete users using Microsoft Entra ID.
• A group that the non-administrator user is a member of. For this tutorial, we created such a group, named MFA-Test-Group. In this tutorial, you enable Microsoft Entra multifactor authentication for this group.
• If you need more information about creating a group, see Create a basic group and add members using Microsoft Entra ID.

Screenshot 2024-09-19 at 12.37.39.png