All about Microsoft 365
A “proof of concept” script that you can use to remove all sharing links (sharing permissions) across all items stored in SharePoint Online and OneDrive for Business, including Teams sites. The script is indented to be run non-interactively and requires Sites.ReadWrite.All application permissions. …
A Graph API based PowerShell script to report on storage usage in SharePoint Online and OneDrive for Business. The script allows you to generate a report down to individual items, with version history included, and can generate output resembling that of the Storage Metrics tool. You can run it against a single site, set of sites or all sites. …
Before we get started, be warned – this is a rant post. While there are some interesting examples and potentially even some learnings you can find below, the post will predominantly focus on my frustration with (some of) the SharePoint Online endpoints on the Graph API. If you have more …
Microsoft has extended their permissions model for working with files, list items and lists within the Graph API. The newly introduced Files.SelectedOperations.Selected, ListItems.SelectedOperations.Selected and Lists.SelectedOperations.Selected scopes are available in both delegate and application permission flavors and allow you to granularly control application access! At the same time, they use the same model the Sites.Selected permissions used, so you can easily adopt them. …
Does the Graph resource support Continuous Access Evaluation? How exactly are long-lived CAE tokens issued, and is it worth it to accept some additional risk as a tradeoff? But most importantly, beware of scenarios where CAE-capable service principal is compromised, as the advertised support for revocation seems to be a bit shady! …