All about Microsoft 365
An updated version of the script to generate a report of all Entra ID Application registrations and their properties. Use the report to find applications with expired credentials, to enforce credential rollover, review overprivileged applications and applications with no usage. A Graph SDK based version of the script is also provided. …
Continue readingReporting on Entra ID application registrations
In this article, we are presenting you with an update version of the PowerShell script to report on Entra ID service principal objects and their properties and permissions. In addition, a version of the script running on the Graph SDK for PowerShell is also provided, for usage with delegate permissions. …
Last week, we explored Entra ID’s app instance property lock feature. As part of the process, we examined one possible way that bad actors could take advantage of the convoluted nature of working with multi-tenant applications within Microsoft 365 and their in-tenant representation, the service principal. As the app instance …
Continue readingScript to review and remove service principal credentials
Today’s article will be a short one. In a small, but meaningful update, Microsoft has released a new addition to the signInActivity resource, which allows us to determine the last time a given user was able to sign in successfully to the service (“last successful login timestamp”). Until recently, we …
Continue readingWe can finally report on last successful login timestamp in Entra ID
For this week’s updated PowerShell script, we will tackle the scenario of removing all mailbox (Full access) permissions for a given user. Such task might be performed as part of a cleanup after (suspected) account compromise, or as part of the leaver process. We did in fact cover this scenario …
Continue readingBulk remove mailbox permissions for Microsoft 365 users