The Microsoft Graph API offers great access to SharePoint Online site content, but sometimes the need exists to resist app access to SharePoint Online sites. That's where the Sites.Selected Graph permission comes in by allowing administrators to dictate exactly which sites an app can access. Practice the Principle of Least Permission!
Securing applications in an Entra tenant is crucial, especially after recent attacks like Midnight Blizzard. This article reviews how to use PowerShell to help identify privileged applications, their permissions, as well as client Secrets.
A previous article described a script to find SharePoint Online files that didn't have retention labels. This article picks up the thread and shows how to use the data generated by the previous script to apply retention labels to the unlabeled files using cmdlets from the Microsoft Graph PowerShell SDK. Some issues are met along the way, but the script works and does the job, which is all that counts at the end of the day.
Entra ID sign-in data is a valuable source of information for Microsoft 365 tenant administrators. Although you can browse sign-in data through the Entra admin center, working with the data through PowerShell reveals all sorts of possibilities for analysis to answer questions about who is connecting to your tenant.
Moving Group-Based Licensing to the Microsoft 365 Admin Center can create some challenges. Luckily there is a way to avoid this. In this blog, we explain how to execute Group-Based License swaps with the help of the Microsoft Graph PowerShell SDK.
The room mailbox statistics script has proven to be a popular script downloaded and used by many to analyze the usage patterns of room mailboxes. Recently, a reader pointed out that the Graph API request to fetch workspaces didn't work. Microsoft has changed the Places resource and the request now needed to run against the beta endpoint. All of which brought me to rewrite the script using the Graph SDK.
Users receive all manner of notification messages from different sources. These messages are of no great value after a few days, so here's a script to find and remove messages to clean up mailboxes. All written using cmdlets from the Microsoft Graph PowerShell SDK.
Three years ago, we described how to create organizational contacts in user mailboxes with Graph API requests. In this iteration, we read the contacts from a Microsoft list and use Microsoft Graph PowerShell SDK cmdlets to update user mailboxes. The techniques explained in the article can be used in many scenarios.
Exchange Online mail folders and messages are a very important resource for Microsoft 365 tenants. This article discusses how to use cmdlets from the Microsoft Graph PowerShell SDK to retrieve information about mailbox folders and mail messages together with some performance tips for dealing with folders that store thousands of messages.
GitHub Copilot costs $10/month. At that price level, anyone working with PowerShell should try out the AI assistance to see if it helps. But will GitHub Copilot work well with Microsoft 365 PowerShell modules like Exchange Online and the Microsoft Graph PowerShell SDK. That's what we tested and report on here.
On June 27, 2024, Microsoft launched the preview of the Entra PowerShell module. Built on top of the Microsoft Graph PowerShell SDK, the new module helps organizations that still have PowerShell scripts based on the now-deprecated AzureAD and AzureADPreview modules. If you're in that situation, the Entra module might help. But I recommend using the Microsoft Graph PowerShell SDK instead.
This article explains how to use PowerShell to create a report listing the files from a OneDrive for Business account. Because so many Microsoft 365 apps store their files in OneDrive (and other apps too), OneDrive can become a form of dumping ground for data. Seeing file information in the report allows account owners to clean up their digital debris.
