New Graph API methods available for Entra ID audit logs operations

In this article we cover some recent additions to the Graph API that bring support for some Entra audit-related operations. We can now get summarized data for user non-interactive, service principal and managed identity sign-in events, via the getSummarizedNonInteractiveSignIns, getSummarizedServicePrincipalSignIns and getSummarizedMSISignIns methods, respectively. We can also get the count of sign-in events per app (signInEventsAppSummary) or overall (signInEventsSummary). Lastly, a metadata-like endpoint that list all currently supported Entra audit log activities has been added under the auditActivityTypes endpoint. …

Continue readingNew Graph API methods available for Entra ID audit logs operations

How to bulk rename items in SharePoint Online and OneDrive for Business

In this article, we examine some basis examples for renaming items (files) stored in SharePoint Online or OneDrive for Business, in bulk. The code samples leverage the Graph SDK for PowerShell’s cmdlet, and a sample using PnP PowerShell is provided as well. As for the scenarios we cover, we start with a simple rename to lowercase, followed by CSV-based example and an example that leverages both the item’s properties and fields. …

Continue readingHow to bulk rename items in SharePoint Online and OneDrive for Business

How to manage Entra ID’s banned password list via the Graph SDK for PowerShell

Entra ID’s password protection feature was introduced back in 2018, adding support for a banned password list, the smart lockout controls and integration with on-premises AD. Programmatic access to the feature was enabled via directory settings templates, which at the time were exposed via the Azure AD Preview PowerShell module, …

Continue readingHow to manage Entra ID’s banned password list via the Graph SDK for PowerShell

Using the estimateAccess method to determine permissions on Entra objects

In this article, we take a look at the undocumented estimateAccess Graph API method, which can be used to determine what permissions a given user or application has against any directory object. This in turn can help you troubleshoot permission related issues, such as those where a given app throws an unexpected 403 error. …

Continue readingUsing the estimateAccess method to determine permissions on Entra objects