Remove user from all Microsoft 365 groups and roles (and more) via the Graph API (non-interactive)

A PowerShell script to remove user, or a set of users, from all groups they are a member of by using the Graph API methods. You can leverage the additional parameters of the script in order to also remove any directory role assignments, ownership assignments and delegate permission grants. The script supports Microsoft 365 Groups, Entra Security Groups, Exchange Distribution Groups and Mail-Enabled security groups. …

Continue readingRemove user from all Microsoft 365 groups and roles (and more) via the Graph API (non-interactive)

Changes in Set-UnifiedGroup result in lack of proper audit trail

Recently, we’ve noticed that calling the Set-UnifiedGroup cmdlet with certain parameters no longer generates events within the Exchange Online Admin audit log. A more detailed investigations confirms those observations and highlights additional oddities. Most importantly, it looks like we can no longer obtain the actor’s IP address information. …

Continue readingChanges in Set-UnifiedGroup result in lack of proper audit trail

How to manage email addresses for Microsoft 365 Groups

I set to test claims that the email address(es) of a Microsoft 365 Groups can be managed via the Graph API. The results prove that this is not the case, and instead one should use the methods exposed by the Exchange Online admin tools and APIs. Concrete examples are provided in the article. …

Continue readingHow to manage email addresses for Microsoft 365 Groups