Category: Entra ID

Cat Links Entra ID, Graph API, Microsoft 365, OneDrive for Business, SharePoint Online

Granular permissions for working with files, list items and lists added to the Graph API!

Posted on Vasil Michev

Microsoft has extended their permissions model for working with files, list items and lists within the Graph API. The newly introduced Files.SelectedOperations.Selected, ListItems.SelectedOperations.Selected and Lists.SelectedOperations.Selected scopes are available in both delegate and application permission flavors and allow you to granularly control application access! At the same time, they use the same model the Sites.Selected permissions used, so you can easily adopt them. …

Continue readingGranular permissions for working with files, list items and lists added to the Graph API!

Cat Links Entra ID, Graph API, Microsoft 365, Office 365, PowerShell

How to properly filter for specific enabled services via the Graph API/SDK

Posted on Vasil Michev

The limited (and convoluted) filter capabilities of the Graph API have lead to scenarios where people are using incorrect queries to filter out the set of users enabled for specific Microsoft 365 service(s). In this article, we will go over some of the common mistakes I’ve seen in online examples, and provide you with a “proper” solution, to the best of the current Graph API filtering capabilities. …

Continue readingHow to properly filter for specific enabled services via the Graph API/SDK

Cat Links Entra ID, Exchange Online, Graph API, Office 365, OneDrive for Business

Some ramblings around Continuous access evaluation, support for Graph and service principals

Posted on Vasil Michev

Does the Graph resource support Continuous Access Evaluation? How exactly are long-lived CAE tokens issued, and is it worth it to accept some additional risk as a tradeoff? But most importantly, beware of scenarios where CAE-capable service principal is compromised, as the advertised support for revocation seems to be a bit shady! …

Continue readingSome ramblings around Continuous access evaluation, support for Graph and service principals