Create report schedules for Microsoft 365 reports via PowerShell

While the functionality to create report schedules for (handful of the) Microsoft 365 hasn’t received any love for years now, I want to remind you that it still exists. In this article, we will take a deeper look at the PowerShell cmdlets used to manage report schedules, as well as refresh your memory on some of the basics. And who knows, Microsoft might eventually remember this functionality exists and add support for more reports 🙂 …

Continue readingCreate report schedules for Microsoft 365 reports via PowerShell

Few notes on disabling access to PowerShell in Exchange Online

A question over at Experts Exchange prompted me to refresh my memory on the process of disabling access to PowerShell for Exchange Online users. The proper way to do that, as detailed by Tony in this article, is to toggle the corresponding flag on the user object. Microsoft is however …

Continue readingFew notes on disabling access to PowerShell in Exchange Online

First look at the analyzedEmails Graph API endpoint

Today’s article will be about the newly introduced /analyzedEmails Graph API endpoint, which in a nutshell is a lightweight Threat explorer implementation. While the new API fails to measure up to the robust tool that Threat explorer is, this is not to say it has no merit, as it does …

Continue readingFirst look at the analyzedEmails Graph API endpoint

Some ramblings around Continuous access evaluation, support for Graph and service principals

Does the Graph resource support Continuous Access Evaluation? How exactly are long-lived CAE tokens issued, and is it worth it to accept some additional risk as a tradeoff? But most importantly, beware of scenarios where CAE-capable service principal is compromised, as the advertised support for revocation seems to be a bit shady! …

Continue readingSome ramblings around Continuous access evaluation, support for Graph and service principals

Remove user from all Microsoft 365 groups and roles (and more) via the Graph API (non-interactive)

A PowerShell script to remove user, or a set of users, from all groups they are a member of by using the Graph API methods. You can leverage the additional parameters of the script in order to also remove any directory role assignments, ownership assignments and delegate permission grants. The script supports Microsoft 365 Groups, Entra Security Groups, Exchange Distribution Groups and Mail-Enabled security groups. …

Continue readingRemove user from all Microsoft 365 groups and roles (and more) via the Graph API (non-interactive)