Category Archives: PowerShell

Report on Azure AD group members via the Graph API

A Graph API based PowerShell script to list members of all (or some) groups within your Microsoft 365 tenant. Continue reading

Posted in Azure AD, Graph API, Microsoft 365, Office 365, PowerShell | Leave a comment

Did you know: Configuring mailbox settings for Mail users (and guests)

Guest users have become a “standard” feature of every Office 365 tenant out there, as many of the collaboration features within the suite depend on them. In the case of Microsoft 365 Groups and Teams, guests can be added as … Continue reading

Posted in Exchange Online, Microsoft 365, Office 365, PowerShell | Leave a comment

ExO RBAC improvements #3: Limiting access in CBA scenarios

Certificate-based authentication (CBA) for Exchange Online PowerShell was introduced two years ago as a method to automate the execution of scripts and tasks in a modern authentication world. In a nutshell, CBA allows you to leverage the OAuth client credentials … Continue reading

Posted in Azure AD, Exchange Online, Microsoft 365, Office 365, PowerShell | Leave a comment

ExO RBAC improvements #2: Support for administrative units

Administrative units in Azure AD are the rough equivalent of an OU, and have been around for years. They are a cornerstone of Azure AD’s RBAC model, and as such we’ve covered them extensively over the years. As Microsoft is … Continue reading

Posted in Azure AD, Exchange Online, Microsoft 365, Office 365, PowerShell | Leave a comment

ExO RBAC improvements #1: Limiting application access

Exchange has long been the prime example of a workload with granular and robust permissions model. Thus, it comes as no surprise that the Azure AD role-based access control (RBAC) model follows most of the principles introduced by Exchange. With … Continue reading

Posted in Exchange Online, Microsoft 365, Office 365, PowerShell | 2 Comments