All about Microsoft 365
A short article on how to use the Graph API methods or the corresponding Graph SDK for PowerShell cmdlets to hard-match on-premises user object against their Entra ID counterparts. …
Continue readingHow to hard-match Entra ID users via the Graph API or the Graph SDK for PowerShell
In this article we will introduce you to some less known Graph API endpoints and methods (as well as some PowerShell cmdlets) that can help you report on or remediate against CIS benchmark controls. …
Continue readingLess known Graph API endpoints you can use to ensure compliance with CIS benchmark
As Microsoft is yet to provide Graph API endpoints for access to all of the Microsoft 365 reports, in this article we examine a workaround that allows you to fetch the same data by alternative means. As an added bonus, this method allows you to also fetch data for some reports that are not even exposed in the UI yet! …
Continue readingHow to fetch data for reports Microsoft is yet to provide Graph API endpoints for
Does the Graph resource support Continuous Access Evaluation? How exactly are long-lived CAE tokens issued, and is it worth it to accept some additional risk as a tradeoff? But most importantly, beware of scenarios where CAE-capable service principal is compromised, as the advertised support for revocation seems to be a bit shady! …
In this article, we will detail how to manage delegate permissions (OAuth2PermissionGrant) for any Entra ID integrated application on a per-user basis via the Graph API or the Graph SDK for PowerShell. With this knowledge at hand, you should never have to add tenant-wide consents again! …
Continue readingHow to add, remove or update Entra ID delegate permissions for specific users