More on service principal permissions in Exchange Online

Few days back I briefly covered the advancements in Exchange Online’s support for service principal objects. In the context of said article, we only talked about Full access permissions, but since service principals are now supported objects in Exchange Online, the question remains which other functionalities support them. So let’s …

Continue readingMore on service principal permissions in Exchange Online

Improved version of the mailbox permissions inventory script

As I’m continuing the quest of updating old scripts to the latest and greatest, our next step is the mailbox permissions inventory script. Few things have changed since the initial version of said script was released. Most notably, Microsoft cleaned up the output a bit, and “system” entries are no …

Continue readingImproved version of the mailbox permissions inventory script

Improved handling of Mailbox permissions in Exchange Online

As I was making some changes to the Mailbox permissions inventory script, I noticed few new parameters made available for the Get-MailboxPermission cmdlet. So it was only natural to take them for a spin. The parameters in question include -IncludeUnresolvedPermissions and -IncludeSoftDeletedUserPermissions, as well as the generic -SoftDeletedMailbox. Here are …

Continue readingImproved handling of Mailbox permissions in Exchange Online

Power platform DLP gets advanced granular controls

I have been rather vocal about the inadequate admin controls within the Power platform for a while now. While I can appreciate the flexibility a solution such as Power Automate adds and its usefulness across a myriad of scenarios, the simple fact remains that it can be abused to perform …

Continue readingPower platform DLP gets advanced granular controls