How to to control self-service purchases in the Microsoft 365 admin center

Use the Self-service trials and purchases page within the Microsoft 365 Admin Center to controls settings for self-service purchases and trials for end users in your organization. The functionality (almost) matches the settings exposed via the MSCommerce module, so you can think of it as a UI layer on top of said module. …

Continue readingHow to to control self-service purchases in the Microsoft 365 admin center

Few notes on disabling access to PowerShell in Exchange Online

A question over at Experts Exchange prompted me to refresh my memory on the process of disabling access to PowerShell for Exchange Online users. The proper way to do that, as detailed by Tony in this article, is to toggle the corresponding flag on the user object. Microsoft is however …

Continue readingFew notes on disabling access to PowerShell in Exchange Online

“Sequence” events in the Entra Audit log and how to work with them

A question over at Q&A highlighted some changes in the way Microsoft is generating Entra audit log records for license operations. We have talked about issues surrounding this process a lot in the past, for example in this article over at Practical 365. Apart from missing entries, a common pain …

Continue reading“Sequence” events in the Entra Audit log and how to work with them

Report on externally shared files in Microsoft 365 via the Graph API

An updated version of my “proof of concept” script to report on any and all externally shared files within the organization. This new version covers SharePoint Online sites as well and can also process individual sites via the -Sites parameter. The output has been reworked and now uses the ImportExcel module to generate a “pretty” Excel file with conditional formatting and clickable links. In addition, I’ve toyed with another version of the script that enumerates lists and list items, as opposed to the “classic” one that enumerates drives and processes them much like a traditional folder structure. Both versions should give you the same set of results, but can differ in performance and throttling aspect… …

Continue readingReport on externally shared files in Microsoft 365 via the Graph API

How to properly filter for specific enabled services via the Graph API/SDK

The limited (and convoluted) filter capabilities of the Graph API have lead to scenarios where people are using incorrect queries to filter out the set of users enabled for specific Microsoft 365 service(s). In this article, we will go over some of the common mistakes I’ve seen in online examples, and provide you with a “proper” solution, to the best of the current Graph API filtering capabilities. …

Continue readingHow to properly filter for specific enabled services via the Graph API/SDK