The Microsoft Graph API offers great access to SharePoint Online site content, but sometimes the need exists to resist app access to SharePoint Online sites. That's where the Sites.Selected Graph permission comes in by allowing administrators to dictate exactly which sites an app can access. Practice the Principle of Least Permission!
Everyone's very excited about the potential goodness of Copilot agents, but how Microsoft 365 tenants will manage potentially thousands of agents in the future is something that isn't clear. Some administrative capabilities are in the Microsoft 365 admin center, but are these sufficient? We don't think so, and this article explains why and what we'd do about the problem.
Microsoft 365 Copilot licensing costs a lot of money. At $360 annually, it's important to make sure that everyone with a license makes full use of Copilot to become more productive and efficient. Usage data is available in the Graph, and some PowerShell can reveal who's using Copilot and who's not. With that data, you can decide whether to remove licenses for reassignment to other users.
A previous article described a script to find SharePoint Online files that didn't have retention labels. This article picks up the thread and shows how to use the data generated by the previous script to apply retention labels to the unlabeled files using cmdlets from the Microsoft Graph PowerShell SDK. Some issues are met along the way, but the script works and does the job, which is all that counts at the end of the day.
Microsoft is all in for Copilot at present and agents are a big part of the story. Multiple ways exist to create a declarative agent for use with Copilot in BizChat and Teams. This article reviews how to create an agent with the Teams Toolkit, Copilot Studio, and Microsoft 365 Copilot - and if any usage data are created for custom agents.
Purview Data Lifecycle management includes many ways to apply retention labels to SharePoint Online files, some of which require E5 licenses. Tools are available to show you what files have retention labels, but finding unlabeled SharePoint files is difficult because no out-of-the-box methods are available. Here we show how to use a content search to find unlabeled SharePoint files, and how to adjust the search results to have usable data for further processing.
Often tenants create user sign-in reports based on the sign-in data held in user account properties. This article explains how to supplement that information with insights about the apps users sign into using sign-in audit logs. The combined information is more valuable than simply knowing when someone last successfully signed in.
In our 2024 review of Microsoft 365, we consider some of the major technical advances that occured in Microsoft's cloud ecosystem in 2024 together with some upcoming changes that have the potential to affect tenant operations. As always, our choice of what's important and what's not might not match yours, so feel free to comment and voice your opinion.
This article describes what happens when the Connect-MgGraph cmdlet runs in interactive and app-only sessions with the Microsoft Graph PowerShell SDK. A session is created and a context is established, and it's possible to use the session context to do real work.
Given the widespread use of guest accounts within Microsoft 365 to allow external sharing of resources, it’s almost inevitable that some unused guest accounts exist in any Microsoft 365 tenant. Identifying unused guest accounts is a good management practice. If the accounts serve no purpose, why keep them? This article explores how to find unused guest accounts. What you do with them later is up to you.
Microsoft has a new allInteractionHistory Graph API in beta. The API returns details of user interactions with Microsoft 365 Copilot apps, like Copilot in Word and Copilot in Outlook at a much more detailed level than what is available in the usage report API. Despite the current flaws in the API, having access to detailed information about how people use technology is incredibly valuable.
You can't prevent Microsoft 365 Chat finding documents based on searches against Microsoft 365 Search and the semantic index. But you can stop Copilot from using the content of sensitive documents in its summaries and generated text. This article explains how the different ways to block Copilot in Microsoft 365 work.
