Using the estimateAccess method to determine permissions on Entra objects

In this article, we take a look at the undocumented estimateAccess Graph API method, which can be used to determine what permissions a given user or application has against any directory object. This in turn can help you troubleshoot permission related issues, such as those where a given app throws an unexpected 403 error. …

Continue readingUsing the estimateAccess method to determine permissions on Entra objects

Graph-based What If Conditional Access tool

Microsoft released new Graph API based implementation of the What If tool. In this article, we will take a look at how to leverage the new What If experience in the UI as well as how the underlying Graph API endpoints work. It is great to finally have a supported method to test your Conditional Access policies! …

Continue readingGraph-based What If Conditional Access tool

Working with custom attributes via the Graph SDK for PowerShell and the Entra module

In this article, we will examine how to work with Exchange custom attributes (also known as extension attributes) via the Graph SDK for PowerShell. The examples include retrieving and modifying values for the set of extensionAttribute1-15, generating a report of all the values, bulk scenarios and more. We are also including some examples for the Entra PowerShell module, which does improve the experience a bit. Read on …

Continue readingWorking with custom attributes via the Graph SDK for PowerShell and the Entra module